<!DOCTYPE html>
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
<p><br>
Our domainsure monitors started picking up some weirdness out of
.va tld today as it appeared that up to 3 of their 5 nameservers
were wildcarded and handing out NS records that seemed
autogenerated:</p>
<p>dig -t ns easydns.va @c.nic.va <br>
<br>
;; QUESTION SECTION:<br>
;easydns.va. IN NS<br>
<br>
;; AUTHORITY SECTION:<br>
easydns.va. 0 IN NS
ck02-fded248d2d-4044ca6f.va.<br>
<br>
;; Query time: 116 msec<br>
;; SERVER: 212.77.2.58#53(c.nic.va) (UDP)<br>
;; WHEN: Sun Dec 01 00:57:25 UTC 2024<br>
;; MSG SIZE rcvd: 79</p>
<p>This is hard to replicate at the moment, one our guys is saying
it's happening over IPv4 but not IPv6, and it seems to affect the
three nic.va nameservers: <br>
</p>
<p>a.nic.va<br>
b.nic.va<br>
c.nic.va</p>
<p>The two namex.it nameservers (osiris.namex.it and seth.namex.it
don't seem to be doing it)</p>
<p>Other hostnames we've seen returned include</p>
<p>ck02-ca9eec2d87-4044ca6e.va<br>
ck02-795dd657af-4044ca6e.va<br>
ck02-c843fe855c-4044ca6e.va<br>
ck02-8f762afaa1-4044ca6e.va<br>
</p>
<div class="moz-signature">I haven't seen one yet that actually
exists as a hostname.</div>
<div class="moz-signature"><br>
</div>
<div class="moz-signature">- mark<br>
</div>
<div class="moz-signature">-- <br>
Mark E. Jeftovic <a class="moz-txt-link-rfc2396E" href="mailto:markjr@easydns.com"><markjr@easydns.com></a><br>
Co-founder & CEO easyDNS Technologies Inc.<br>
+1-(416)-535-8672 ext 225<br>
<br>
<small><i>"Never expect a thing you do not want,<br>
and never desire a thing you do not expect."<br>
-- Bob Proctor </i></small></div>
</body>
</html>