yeah true but if the DNS records aren't actually pointing anywhere then there's no real threat no? because everything stays in the internal network