"Now that he [i.e. the hacker] has your web server and associated domain name, he is going to want to
resolve this information to a specific IP address. Rather than just using something like  
the host command, which will give away his location, he uses tor-resolve, which is
included with the Tor package. Joe Hacker knows it is critically important not to use any
tools that will send UDP or ICMP packets directly to the target system. All lookups must
go through the Tor network to preserve anonymity."