MoinQ:

watchNS/craigslist.orgについて、ここに記述してください。

http://www.welivesecurity.com/2014/11/25/craigslist-redirected-prank-site-via-dns-hijack/

http://www.business2community.com/tech-gadgets/craigslist-down-for-hours-after-dns-attack-forced-domain-hijacking-01077381

https://lists.dns-oarc.net/pipermail/dns-operations/2014-November/012479.html

The craigslist account at one of our registrars was compromised and the NS
records migrated away from their rightful home.  That issue has since been
corrected, but the various caches around the Internet are still holding the
old data.

If you could take a look at your caches to see if craigslist.org has the
following NS records:

ns1p.craigslist.org
ns2p.craigslist.org
ns1f.craigslist.org
ns2f.craigslist.org

If you see something else there, then you have a poisoned cache.

https://sfbay.craigslist.org/eby/com/4775276861.html

Craigslist DNS hacked? (berkeley) Has some lulz hacker gotten ahold of craigslist.org DNS? I got this when replying to an email:

: Host or domain name not found. Name service error for name=reply.craigslist.org type=A: Host found but no data record of requested type

>nslookup reply.craigslist.org

Non-authoritative answer: *** Can't find reply.craigslist.org: No answer

DNS looks like it was taken over:

>whois craigslist.org

Domain Name:CRAIGSLIST.ORG
Domain ID: D1516458-LROR
Creation Date: 1997-09-11T04:00:00Z
Updated Date: 2014-11-24T00:32:41Z <-------------------------DNS record changed today
Registry Expiry Date: 2016-09-10T04:00:00Z
Sponsoring Registrar:Network Solutions, LLC (R63-LROR)
Sponsoring Registrar IANA ID: 2
WHOIS Server:
Referral URL:
Domain Status: clientTransferProhibited
Registrant ID:38244717-NSI
Registrant Name:steven wynhoff [at] LulzClerk <----------------LulzClerk?! WTF?!
Registrant Organization:steven wynhoff [at] LulzClerk
Registrant Street: 222 Sutter Street
Registrant Street: 9th Floor
Registrant City:San Francisco
Registrant State/Province:CA
Registrant Postal Code:94108-4460
Registrant Country:US
Registrant Phone: show contact info
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email:netsolemployee [at] yopmail.com
Admin ID:15370696-NSI
Admin Name:Steven Wynhoff
Admin Organization:craigslist
Admin Street: 1300 NW Willow D
Admin Street: 9th Floor
Admin City:Grain Valley
Admin State/Province:MO
Admin Postal Code:64029
Admin Country:US
Admin Phone: show contact info
Admin Phone Ext:
Admin Fax: show contact info
Admin Fax Ext:
Admin Email:savagedd [at] Safe-mail.net
Tech ID:15370696-NSI
Tech Name:Steven Wynhoff
Tech Organization:craigslist
Tech Street: 1300 NW Willow D
Tech Street: 9th Floor
Tech City:Grain Valley
Tech State/Province:MO
Tech Postal Code:64029
Tech Country:US
Tech Phone: show contact info
Tech Phone Ext:
Tech Fax: show contact info
Tech Fax Ext:
Tech Email:savagedd [at] Safe-mail.net
Name Server:NS75.WORLDNIC.COM
Name Server:NS76.WORLDNIC.COM
DNSSEC:Unsigned

Also, there's no way that Craig's List would host their DNS on WORLDNIC.

    do NOT contact me with unsolicited services or offers

$ dnsq ns craigslist.org ns75.worldnic.com

2 craigslist.org:
84 bytes, 1+0+1+0 records, response, authoritative, noerror
query: 2 craigslist.org
authority: craigslist.org 3600 SOA ns1p.craigslist.org hostmaster.craigslist.org 2014112401 10800 3600 604800 3600

MoinQ: DNS/乗取/craigslist.org (last edited 2022-03-30 00:12:11 by ToshinoriMaeno)