Prompt injection, XSS and SIEM-exfil payloads living in reverse DNS, plus 28 fake Googlebots that passed FCrDNS
- Google's own nameserver vouched for Russian IPs as Googlebot.
- One PTR addresses AI agents directly, and it passes forward confirmation.
- The exfil payload dodges filters for spaces, parentheses and quotes, and phones home to an IP written as one decimal number. submitted by /u/HexLayer3
