I used to do this with because I found that some web performance scanners would usually forget to escape the content of the HTTP headers. After sending this dom

I used to do this with because I found that some web performance scanners would usually forget to escape the content of the HTTP headers. After sending this domain [1] some of them would immediately execute the script. Feel free to send a HEAD request to this website so you can understand better, it's basically the same thing as with the TXT DNS records. [1] https://cixtor.com/ https://cixtor.com/