There must be some kind of exploit available, with that domain up for grabs and millions of dev environments pointing at it? Just as a note - it is trivial to

There must be some kind of exploit available, with that domain up for grabs and millions of dev environments pointing at it? Just as a note - it is trivial to register a domain like `foobar.test` and have `foobar.test` and `*.foobar.test` all resolve to 127.0.0.1. And it is under your control.