MoinQ: DNS/awsdns/乗取/goodsie.com

1. aws/goodsie.com

一部が返事をするようになった。(再乗取) http://goodsie.com

現在はREFUSEDを返す。-- ToshinoriMaeno 2021-01-27 01:35:53

返事をしないlame delegationではないが、怪しい。-- ToshinoriMaeno 2020-01-19 23:54:32

検索でヒットしたサイト: https://vimeo.com/22572544

• 9年前にはサイトはあったようだ。

1.1. watchA

https://goodsie.com A なし。

http://www.goodsie.com

http://wwwo.goodsie.com

  Subdomain Takeover by Todayisnew 4 

www.goodsie.com.        300     IN      A       70.35.202.43

*.goodsie.com.          300     IN      A       70.35.202.43

2. whois

   Domain Name: GOODSIE.COM
   Registry Domain ID: 1490603267_DOMAIN_COM-VRSN
   Registrar WHOIS Server: whois.tucows.com
   Registrar URL: http://www.tucows.com
   Updated Date: 2019-06-14T10:29:03Z
   Creation Date: 2008-06-10T03:01:34Z
   Registry Expiry Date: 2021-06-10T03:01:34Z
   Registrar: Tucows Domains Inc.
   Registrar IANA ID: 69
   Registrar Abuse Contact Email:
   Registrar Abuse Contact Phone:
   Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
   Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
   Name Server: NS-1110.AWSDNS-10.ORG
   Name Server: NS-1793.AWSDNS-32.CO.UK
   Name Server: NS-469.AWSDNS-58.COM
   Name Server: NS-656.AWSDNS-18.NET
   DNSSEC: unsigned
   URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of whois database: 2020-01-19T23:52:50Z <<<

3. history

バラバラの返事をするNSに委譲されている。(乗取の疑いあり)

$ dig -t ns goodsie.com @ns-469.awsdns-58.com

; <<>> DiG 9.11.3-1ubuntu1.11-Ubuntu <<>> -t ns goodsie.com @ns-469.awsdns-58.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 60994
;; flags: qr aa rd; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;goodsie.com.                   IN      NS

;; ANSWER SECTION:
goodsie.com.            172800  IN      NS      ns-1210.awsdns-23.org.
goodsie.com.            172800  IN      NS      ns-1925.awsdns-48.co.uk.
goodsie.com.            172800  IN      NS      ns-469.awsdns-58.com.
goodsie.com.            172800  IN      NS      ns-799.awsdns-35.net.

;; Query time: 108 msec
;; SERVER: 205.251.193.213#53(205.251.193.213)
;; WHEN: Mon Jan 20 08:49:58 JST 2020
;; MSG SIZE  rcvd: 177

$ dig -t ns goodsie.com @NS-1110.AWSDNS-10.ORG

; <<>> DiG 9.11.3-1ubuntu1.11-Ubuntu <<>> -t ns goodsie.com @NS-1110.AWSDNS-10.ORG
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4569
;; flags: qr aa rd; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;goodsie.com.                   IN      NS

;; ANSWER SECTION:
goodsie.com.            172800  IN      NS      ns-1110.awsdns-10.org.
goodsie.com.            172800  IN      NS      ns-2004.awsdns-58.co.uk.
goodsie.com.            172800  IN      NS      ns-71.awsdns-08.com.
goodsie.com.            172800  IN      NS      ns-868.awsdns-44.net.

;; Query time: 5 msec
;; SERVER: 205.251.196.86#53(205.251.196.86)
;; WHEN: Wed Jan 22 10:30:07 JST 2020
;; MSG SIZE  rcvd: 176

CategoryDns CategoryWatch CategoryTemplate