Comment by londons_explore

So this exploit requires control of the local network, since such a request isn't valid DNS and therefore wouldn't get forwarded through a typical users DNS resolver?