[dns-operations] .VA tld has been intermittently wildcarded?

[Mark E. Jeftovic]

Our domainsure monitors started picking up some weirdness out of .va tld 
today as it appeared that up to 3 of their 5 nameservers were wildcarded 
and handing out NS records that seemed autogenerated:

dig -t ns easydns.va @c.nic.va

;; QUESTION SECTION:
;easydns.va.                    IN      NS

;; AUTHORITY SECTION:
easydns.va.             0       IN      NS ck02-fded248d2d-4044ca6f.va.

;; Query time: 116 msec
;; SERVER: 212.77.2.58#53(c.nic.va) (UDP)
;; WHEN: Sun Dec 01 00:57:25 UTC 2024
;; MSG SIZE  rcvd: 79

This is hard to replicate at the moment, one our guys is saying it's 
happening over IPv4 but not IPv6, and it seems to affect the three 
nic.va nameservers:

a.nic.va
b.nic.va
c.nic.va

The two namex.it nameservers (osiris.namex.it and seth.namex.it don't 
seem to be doing it)

Other hostnames we've seen returned include

ck02-ca9eec2d87-4044ca6e.va
ck02-795dd657af-4044ca6e.va
ck02-c843fe855c-4044ca6e.va
ck02-8f762afaa1-4044ca6e.va

I haven't seen one yet that actually exists as a hostname.

- mark
-- 
Mark E. Jeftovic <markjr at easydns.com>
Co-founder & CEO easyDNS Technologies Inc.
+1-(416)-535-8672 ext 225

/"Never expect a thing you do not want,
and never desire a thing you do not expect."
-- Bob Proctor /
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20241130/a80e5ca4/attachment.html>