Skip to content

Instantly share code, notes, and snippets.

@bortzmeyer

bortzmeyer/gandi-hijacking-scrt.md

Created July 11, 2017 09:00
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save bortzmeyer/0c6c843a89b9e381ee9396e51c4461f1 to your computer and use it in GitHub Desktop.
Save bortzmeyer/0c6c843a89b9e381ee9396e51c4461f1 to your computer and use it in GitHub Desktop.
Download ZIP
Hijacking of scrt.ch
Raw
gandi-hijacking-scrt.md

https://news.gandi.net/en/2017/07/detailed-incident-report/

Notice the difference between the delegation and the zone itself:

;;  bailiwick: ch.
;;      count: 4
;; first seen: 2017-07-07 12:34:28 -0000
;;  last seen: 2017-07-07 12:34:28 -0000
scrt.ch. IN NS ns1.dnshost.ga.
scrt.ch. IN NS ns2.dnshost.ga.

;;  bailiwick: scrt.ch.
;;      count: 3
;; first seen: 2017-07-07 12:34:28 -0000
;;  last seen: 2017-07-07 12:34:28 -0000
scrt.ch. IN NS ns1.example.com.
scrt.ch. IN NS ns2.example.com.
@bortzmeyer
Copy link
Author

Seen by DNSDB

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment