Can DNS Be Used to Hack AI Chatbots?