DNS hijack?

Thu Nov 11 21:28:07 UTC 2021

Okay, so this is anecdotal, but since the domain belongs to me it's more
than a little annoying.

I got some calls that one of my domains, 2dpnr.org was going to a page that
said it was Network Solutions and that my domain was available for renew or
purchase.

I hit my registrar, DirectNic, and found I'm good through 2023. They pulled
up DNS checker and found that a bunch of DNS servers were showing
208.91.197.132 as the IP for the domain. It's actually in 64.130.197.x .

I'm wondering if I was the only one?

-- 
Jeff Shultz

-- 
Like us on Social Media for News, Promotions, and other information!!

<https://www.facebook.com/SCTCWEB/>      
<https://www.instagram.com/sctc_sctc/>      
<https://www.yelp.com/biz/sctc-stayton-3>      
<https://www.youtube.com/c/sctcvideos>

_**** This message 
contains confidential information and is intended only for the individual 
named. If you are not the named addressee you should not disseminate, 
distribute or copy this e-mail. Please notify the sender immediately by 
e-mail if you have received this e-mail by mistake and delete this e-mail 
from your system. E-mail transmission cannot be guaranteed to be secure or 
error-free as information could be intercepted, corrupted, lost, destroyed, 
arrive late or incomplete, or contain viruses. The sender therefore does 
not accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. ****_

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20211111/548a2a81/attachment.html>