I have a client that has their name services done through some third part. The domain was registered through Godaddy (yet a different third party). The name service provider had their domain names hijacked (don't know how) so the name servers my client uses became unreachable or compromised.
Some how the name service provided was able to get the DNS to resolve using different name servers. I am baffled. How is it that the service provider can alter the name servers for the client's domain?
Abbreviated explaination:
*Godaddy Registrar for example.com lists ns2.ispnameserver.com and ns2.ispnameserver.com as name servers.
*ISP provides name server for example.com, manages ns1.ispnameserver.com and ns2.ispnameserver.com
ISP loses control of *ispnameserver.com
Somehow ISP is able to provide new name servers ns1.newispname.com ns2.newispname.com and magically DNS uses ns1.newispname.com and ns2.newispname.com to resolve queries for example.com.
In essense ISP was able to highjack control of client's example.com domian. Whois still list ns1.ispnameserver.com.
How was the ISP able to do that? What organization can provide that service?
Actual Results from dig and whois. Note it's been this way for at least a week.
Comments
Post a Comment