## page was renamed from watchNS/craigslist.org watchNS/craigslist.orgについて、ここに記述してください。 http://www.welivesecurity.com/2014/11/25/craigslist-redirected-prank-site-via-dns-hijack/ http://www.securityweek.com/dns-hijack-how-avoid-being-victim http://www.business2community.com/tech-gadgets/craigslist-down-for-hours-after-dns-attack-forced-domain-hijacking-01077381 https://lists.dns-oarc.net/pipermail/dns-operations/2014-November/012479.html {{{ The craigslist account at one of our registrars was compromised and the NS records migrated away from their rightful home. That issue has since been corrected, but the various caches around the Internet are still holding the old data. If you could take a look at your caches to see if craigslist.org has the following NS records: ns1p.craigslist.org ns2p.craigslist.org ns1f.craigslist.org ns2f.craigslist.org If you see something else there, then you have a poisoned cache. }}} https://sfbay.craigslist.org/eby/com/4775276861.html Craigslist DNS hacked? (berkeley) Has some lulz hacker gotten ahold of craigslist.org DNS? I got this when replying to an email: : Host or domain name not found. Name service error for name=reply.craigslist.org type=A: Host found but no data record of requested type >nslookup reply.craigslist.org Non-authoritative answer: *** Can't find reply.craigslist.org: No answer DNS looks like it was taken over: >whois craigslist.org {{{ Domain Name:CRAIGSLIST.ORG Domain ID: D1516458-LROR Creation Date: 1997-09-11T04:00:00Z Updated Date: 2014-11-24T00:32:41Z <-------------------------DNS record changed today Registry Expiry Date: 2016-09-10T04:00:00Z Sponsoring Registrar:Network Solutions, LLC (R63-LROR) Sponsoring Registrar IANA ID: 2 WHOIS Server: Referral URL: Domain Status: clientTransferProhibited Registrant ID:38244717-NSI Registrant Name:steven wynhoff [at] LulzClerk <----------------LulzClerk?! WTF?! Registrant Organization:steven wynhoff [at] LulzClerk Registrant Street: 222 Sutter Street Registrant Street: 9th Floor Registrant City:San Francisco Registrant State/Province:CA Registrant Postal Code:94108-4460 Registrant Country:US Registrant Phone: show contact info Registrant Phone Ext: Registrant Fax: Registrant Fax Ext: Registrant Email:netsolemployee [at] yopmail.com Admin ID:15370696-NSI Admin Name:Steven Wynhoff Admin Organization:craigslist Admin Street: 1300 NW Willow D Admin Street: 9th Floor Admin City:Grain Valley Admin State/Province:MO Admin Postal Code:64029 Admin Country:US Admin Phone: show contact info Admin Phone Ext: Admin Fax: show contact info Admin Fax Ext: Admin Email:savagedd [at] Safe-mail.net Tech ID:15370696-NSI Tech Name:Steven Wynhoff Tech Organization:craigslist Tech Street: 1300 NW Willow D Tech Street: 9th Floor Tech City:Grain Valley Tech State/Province:MO Tech Postal Code:64029 Tech Country:US Tech Phone: show contact info Tech Phone Ext: Tech Fax: show contact info Tech Fax Ext: Tech Email:savagedd [at] Safe-mail.net Name Server:NS75.WORLDNIC.COM Name Server:NS76.WORLDNIC.COM DNSSEC:Unsigned Also, there's no way that Craig's List would host their DNS on WORLDNIC. do NOT contact me with unsolicited services or offers }}} $ dnsq ns craigslist.org ns75.worldnic.com {{{ 2 craigslist.org: 84 bytes, 1+0+1+0 records, response, authoritative, noerror query: 2 craigslist.org authority: craigslist.org 3600 SOA ns1p.craigslist.org hostmaster.craigslist.org 2014112401 10800 3600 604800 3600 }}}