.US Harbors Prolific Malicious Link Shortening Service

Mon Nov 6 20:17:32 UTC 2023

I've seen a US based ISP do its internal management network reverse DNS
using '.us' as a suffix, where the hierarchy is like POP name, then
city/airport code, then state (eg: CA, NJ, FL), then .us for geographical
location of equipment in USA.

The .us domain in question was owned by the same organization but with only
a stub zone file published on public facing authoritatiev NS, with the
internal zonefile not available to the public.

On Mon, Nov 6, 2023 at 7:35 AM Jay R. Ashworth <jra at baylink.com> wrote:

> ----- Original Message -----
> > From: "Seth Mattinen via NANOG" <nanog at nanog.org>
>
> > On 11/2/23 1:30 PM, goemon--- via NANOG wrote:
> >> Are there any legitimate services running solely on .us domain names?
> >
> > Yes.
>
> Though not -- by several orders of magnitude -- nearly as many as there
> should
> be... but let's not get me started on that.
>
> Cheers,
> -- jr 'RFC1480' a
> --
> Jay R. Ashworth                  Baylink
> jra at baylink.com
> Designer                     The Things I Think                       RFC
> 2100
> Ashworth & Associates       http://www.bcp38.info          2000 Land
> Rover DII
> St Petersburg FL USA      BCP38: Ask For It By Name!           +1 727 647
> 1274
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20231106/1bca1694/attachment.html>