I have a client that has their name services done through
some third part. The domain was registered through Godaddy (yet a different third
party). The name service provider had their domain names hijacked (don't know how) so
the name servers my client uses became unreachable or compromised.
Some how the name service provided was able to
get the DNS to resolve using different name servers. I am baffled. How is it that the
service provider can alter the name servers for the client's
domain?
Abbreviated
explaination:
*Godaddy Registrar for example.com lists ns2.ispnameserver.com
and ns2.ispnameserver.com as name
servers.
*ISP provides name server
for example.com, manages ns1.ispnameserver.com and ns2.ispnameserver.com
ISP loses control of
*ispnameserver.com
Somehow ISP is able to provide new name servers
ns1.newispname.com ns2.newispname.com and magically DNS uses ns1.newispname.com and
ns2.newispname.com to resolve queries for
example.com.
In essense ISP was able to highjack
control of client's example.com domian. Whois still list ns1.ispnameserver.com.
How was the ISP able to do that? What
organization can provide that
service?
href="https://imgur.com/a/ZdM3m" rel="nofollow noreferrer">Actual Results
from dig and whois. Note it's been this way for at least a week.
Comments
Post a Comment