Hide and Seek: Revisiting DNS-based User Tracking