If its contacting the server after infecting, Why is it hard to track the owner of dns address or the ip owner since running a server is impossible without the leaving a trail to real world id.