Slow Leak
200 points · 0 solved
A workstation's DNS log. Most of it is normal browsing. One domain is being used to smuggle data out, a few bytes per query.
10:22:41 10.0.4.17 A 02-735f615f.x.cdn-metrics.example
10:22:42 10.0.4.17 A update.ubuntu.com
10:22:43 10.0.4.17 A www.google.com
10:22:44 10.0.4.17 A time.cloudflare.com
10:22:45 10.0.4.17 A update.ubuntu.com
10:22:46 10.0.4.17 A api.github.com
10:22:47 10.0.4.17 A registry.npmjs.org
10:22:48 10.0.4.17 A time.cloudflare.com
10:22:49 10.0.4.17 A 01-6e735f69.x.cdn-metrics.example
10:22:50 10.0.4.17 A 00-73737b64.x.cdn-metrics.example
10:22:51 10.0.4.17 A 03-74756e6e.x.cdn-metrics.example
10:22:52 10.0.4.17 A fonts.gstatic.com
10:22:53 10.0.4.17 A 04-656c7d.x.cdn-metrics.exampleHints0/2