Re: starwars.com subdomain hijacked?

2010-11-30 Thread Rich Lafferty
"given back" to the original owners. > > Who's at play here? Does DomainsAtCost have a deal with Rebel.com? Or are > they the same company? > > It all seems fishy to me. Is this normal practice? > > > >> Date: Mon, 22 Nov 2010 12:05:21 -

Re: starwars.com subdomain hijacked?

2010-11-22 Thread Rubens Kuhl
On Mon, Nov 22, 2010 at 1:46 PM, Matt Disuko wrote: > It seems the subdomain "shop.starwars.com" is being redirected. > Anybody else seeing this? The Rebel Alliance managed to hit that site, but the Empire struck back and it's back online again. Rubens

Re: starwars.com subdomain hijacked?

2010-11-22 Thread Seth Mattinen
On 11/22/10 9:05 AM, Ken Chase wrote: > > That phishers manage to fake sites that look wrong is also beyond me, what's > so hard about 'save page as'? > Probably because there's no need to try that hard - they'll catch enough people no matter how crappy the phish. ~Seth

RE: starwars.com subdomain hijacked?

2010-11-22 Thread Matt Disuko
same company? It all seems fishy to me. Is this normal practice? > Date: Mon, 22 Nov 2010 12:05:21 -0500 > From: k...@sizone.org > To: nanog@nanog.org > Subject: Re: starwars.com subdomain hijacked? > > > On Mon, Nov 22, 2010 at 08:49:48AM -0800, Wil Schultz said: > >A

Re: starwars.com subdomain hijacked?

2010-11-22 Thread Ken Chase
On Mon, Nov 22, 2010 at 08:49:48AM -0800, Wil Schultz said: >Appears that it's a CNAME for shop.starwars.novator2.com. > >The expiry day is 11/22/2011, so if I were to guess I would think that the domain expired, sent to an advert page, and was just renewed. > >-wil Smartest attack is

RE: starwars.com subdomain hijacked?

2010-11-22 Thread Matt Disuko
ator2.com. 160198 IN NS dns.yourdomainhasexpired.com. novator2.com. 160198 IN NS dns2.yourdomainhasexpired.com. bloody hell. -matt > Subject: Re: starwars.com subdomain hijacked? > From: wschu...@bsdboy.com > Date: Mon, 22 Nov 2010 08:49:48 -08

Re: starwars.com subdomain hijacked?

2010-11-22 Thread Wil Schultz
Appears that it's a CNAME for shop.starwars.novator2.com. The expiry day is 11/22/2011, so if I were to guess I would think that the domain expired, sent to an advert page, and was just renewed. -wil On Nov 22, 2010, at 7:46 AM, Matt Disuko wrote: > > It seems the subdomain "shop.starwars.c

Re: starwars.com subdomain hijacked?

2010-11-22 Thread Jaren Angerbauer
On Mon, Nov 22, 2010 at 8:46 AM, Matt Disuko wrote: > > It seems the subdomain "shop.starwars.com" is being redirected. > > Anybody else seeing this? > Redirected to where? Looks like it is working as expected...? --Jaren

RE: starwars.com subdomain hijacked?

2010-11-22 Thread Gavin Pearce
EN: Mon Nov 22 16:34:39 2010 ;; MSG SIZE rcvd: 121 -Original Message- From: Matt Disuko [mailto:gourmetci...@hotmail.com] Sent: 22 November 2010 15:47 To: nanog@nanog.org Subject: starwars.com subdomain hijacked? It seems the subdomain "shop.starwars.com" is being redirected. Anybody else seeing this?

starwars.com subdomain hijacked?

2010-11-22 Thread Matt Disuko
It seems the subdomain "shop.starwars.com" is being redirected. Anybody else seeing this?