DNS hijack?

Sat Nov 13 15:21:56 UTC 2021

On Fri, Nov 12, 2021 at 6:38 PM Robert L Mathews <lists at tigertech.com> wrote:

> I didn't see the page, but for what it's worth, this is governed by this
> ICANN policy:> https://www.icann.org/resources/pages/errp-2013-02-28-en

It is common that registrars repoint nameservers and redirect web traffic when a
domain's renewal has not been paid for (during 45-day grace period
provided by the registry),
probably more registrars do that than not.

The issue here is not with the expired domain, thus not addressed by
that ICANN policy...

The ICANN policy addresses interrupting the resolution path and
redirecting Web traffic
for expiring domains; there's nothing about other services on those
domains such as
DNS when the expired domain has a backup nameserver host of a
non-expired domain.

In this case, interrupting the resolution path would be fine  (In case
the non-expired domain
have other nameservers),

But the redirection causes DNS instability and failures for domains
that are not expired, even if those domains have other nameservers,
and the non-expired domains get redirected to a web page falsely stating
that they are expired.

--
-JH