4 ms·
They spoof the DNS to make you access a server they control (what they call a v6peer), that relays to another one (called a v4peer), that communicates with the
by progval 5y ago
They spoof the DNS to make you access a server they control (what they call a v6peer), that relays to another one (called a v4peer), that communicates with the v4 Internet.
You can try it with github, for example (the real github.com does not support ipv6):
$ dig @2a01:4f8:c2c:123f:69::1 +short github.com aaaa
2001:0:2e2b:288::8c52:7904
2a01:4f8:c2c:123f:69:0:8c52:7904
2a01:4f9:c010:3f02:69:0:8c52:7904
I'm guessing this doesn't work with DNSSEC, though.
(EDIT: when first sending this comment I was confused because I tried it on a domain with AAAA records, which aren't spoofed)