28 ms·
This bit me kind of bad yesterday. I was about to drive out of cell range and got a text that client's site had some strange page displaying. Unfortunately, t
by throwaway-icann 13y ago
This bit me kind of bad yesterday.
I was about to drive out of cell range and got a text that client's site had some strange page displaying.
Unfortunately, they repoint the dns servers of the domain, and the client had the contact email mx records associated with same domain.
The actual site gets 'dns hikacked' by icann until you fill out a captcha on your site's new page and it emails the whois email account on record with the link.
Had to log into the registrar, luckily had the client's account info, changed the email, and got it verified.
That was 3am yesterday.
Says it takes 24 to 48 hours to updated, but it was only like 8.
Still, if you had an ecommerce site or conduct time-sensitive business via email, be careful.
Because, if you do not see the email, your site will be hijacked by ICANN.
- jrockway 13y agoHow do they email you if your contact email is on the domain they just suspended? Time to set a TTL of 100 years, or something, I guess.
- cschmidt 13y agoYou should never use a contact email that is on the domain for the DNS record in question. Only bad things can result. I use my most basic fastmail.fm email for that purpose.
- jrockway 13y agogoogle.com appears to use a google.com email address in its DNS record.
- jessaustin 13y agoGoogle probably have a real live person they can call if this gets messed up, or even has the potential to get messed up a few months from now.
- deleted 13y ago[deleted]
- throwaway-icann 13y agoThey are also a registrar.
- talideon 13y agoYou get the emails before the DNS suspension date. Here's the policy in question: http://www.icann.org/en/resources/registrars/consensus-policies/errp http://www.icann.org/en/resources/registrars/consensus-polic...
- talideon 13y agoICANN didn't 'hijack' the domain. The domain was suspended from DNS because you hadn't paid your renewal bill. The "strange page" was put up by your registrar to notify any visitors of this and to direct them towards their billing system. The idea is to effectively shame people into paying their bills in a timely manner. Your registrar would've sent you at least three different emails before and shortly after the domain's expiration including a notice of what would happen if you didn't pay on time. If you didn't receive these, then that's on you for not keeping your contact details up to date and correct, which you're required to under your registration contract, and which is why you get those emails out periodically asking that you verify that the details they have for you are correct. If you don't pay your phone bills, electricity bills, rent, &c. on time, you'd expect the service to be removed. Why would domain names be any different?
- throwaway-icann 13y agoActually, the domain had been transferred to a new registrar a month prior to this incident. It was paid for a full year, beginning a month before this incident. Succinctly, you are wrong. But if you would like, here is an analogy: Your electric company wants to make sure your phone number is accurate, so your electrical company calls a number on the account, and unless you answer, they shut off your electricity. Your bill is paid, but they cannot verify your phone, so your power gets cut off. ...and all you have is cordless phone, which won't work without electricity. So, you have to go to the power company to change the phone number on the account to your brother's phone, and then verify using his number to get your electricity turned back on.