3 ms·
Who is your ISP? http://en.wikipedia.org/wiki/DNS_cache_poisoning http://en.wikipedia.org/wiki/DNS_cache_poisoning has definitely been exploited in the wild.
by cypherpunks01 16y ago
Who is your ISP?
http://en.wikipedia.org/wiki/DNS_cache_poisoning http://en.wikipedia.org/wiki/DNS_cache_poisoning has definitely been exploited in the wild. A friend of mine in AWS had to investigate cache poisoning attacks happening on certain ISPs a few years back that were hijacking images.
Edit: Are any affiliate params or headers being passed to the forward page?
- anonymouslambda 16y agoI live in a high-rise in downtown Chicago, so my ISP is some local company that services multi-tenant buildings: https://www.am3inc.com/default.cfm https://www.am3inc.com/default.cfm Yes, affiliate params were being passed in the URL to the forward page.
- cypherpunks01 16y agoYou probably know, but the people to contact are your ISP to tell them of their DNS poisoning, and also the "rewards" company to complain about their sneaky affiliate. You mentioned that it's not confined to just your ISP - It's possible for these DNS attacks to cascade due to the nature of DNS, so the attack may have originated higher up than just your ISP's DNS servers. But they should be able to have a better idea of what's happening.