Security firm Claroc identified more than 6,800 exposed Muse share links by conducting a single passive DNS query against a commercial database for domain cf.metaaiusercontent.com.