It's always DNS. And if it's not DNS, it's certificates.

99.9% of the time.