[144191] in North American Network Operators' Group
anyone from netnames / ascio on list?
daemon@ATHENA.MIT.EDU (Andrew Mulholland)
Sun Sep 4 17:35:02 2011
Date: Sun, 4 Sep 2011 22:34:08 +0100
From: Andrew Mulholland <andy-nanog@bash.sh>
To: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
Hi
Seems Netnames / Ascio have been compromised, resulting in DNS servers for
a number of their customers (telegraph.co.uk, acer.com, betfair.com ,
theregister.co.uk etc) being changed, and the sites being redirected to an
hacked page.
list of domains affected here:
http://zone-h.org/archive/notifier=turkguvenligi.info
Seems there's no 24/7 contact for them..
e.g.
Domain Name: ACER.COM
Registrar: ASCIO TECHNOLOGIES, INC.
Whois Server: whois.ascio.com
Referral URL: http://www.ascio.com
Name Server: NS1.YUMURTAKABUGU.COM
Name Server: NS2.YUMURTAKABUGU.COM
Status: ok
Updated Date: 04-sep-2011
Creation Date: 07-sep-1994
Expiration Date: 17-may-2019
If anyone on list works for them, please raise the alarm internally, and/or
start responding to your customers!
thanks
Andrew