When investigating malicious domains that are used for phishing, malware, etc, you often have to issue DNS queries for these domains.
dig @220.127.116.11 example.com
The potential risks of issuing this command are:
- A maliciously crafted DNS record could try to exploit my DNS utility
- A maliciously crafted DNS record could try to exploit my terminal
- The DNS zone I am querying could be delegated to another, potentially malicious DNS server
- Possible privacy violations[?]
Are there any other potential risks that I have missed or considerations that I should make?
Do you think that this is a valid concern?