2. The method of claim 1 , wherein the log is a DNS resolver log.
1. A method for prepending nonce labels to DNS queries, the method comprising: evaluating whether a log contains a past entry of a domain name resolution query to a name server; determining whether the log contains a recent entry of the domain name resolution query to the name server for a full domain name that resulted in a reply indicating that the full domain name did not exist; determining whether querying the name server with a nonce-less query for the full domain name currently results in a reply indicating that the full domain name exists; determining, with a processor, whether querying the name server with a nonce label prepended query for the full domain name currently results in the reply indicating that the full domain name exists; and the processor flagging the full domain name as inappropriate for nonce label prepending, when it is determined that querying the name server with the nonce label prepended query indicates that the full domain name does not exist.