<div dir="ltr"><div>It's been all over the news for hours; yes, it's happening, yes, it appears to be the Syrian Electronic Army that started it, not clear what the status is now (things are bouncing somewhat).</div>
<div> </div><div> </div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Tue, Aug 27, 2013 at 2:18 PM, John Kinsella <span dir="ltr"><<a href="mailto:jlk@thrashyour.com" target="_blank">jlk@thrashyour.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word">Confirmed hijacked, but I see different results…<div><br></div><div><div>$ dig any <a href="http://nytimes.com" target="_blank">nytimes.com</a></div>
<div class="im"><div><br></div><div>; <<>> DiG 9.8.3-P1 <<>> any <a href="http://nytimes.com" target="_blank">nytimes.com</a></div><div>;; global options: +cmd</div><div>;; Got answer:</div></div><div>
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 9289</div><div class="im"><div>;; flags: qr rd ra; QUERY: 1, ANSWER: 5, AUTHORITY: 2, ADDITIONAL: 1</div><div><br></div><div>;; QUESTION SECTION:</div><div>;<a href="http://nytimes.com" target="_blank">nytimes.com</a>.<span style="white-space:pre-wrap"> </span>IN<span style="white-space:pre-wrap"> </span>ANY</div>
<div><br></div><div>;; ANSWER SECTION:</div></div><div><a href="http://nytimes.com" target="_blank">nytimes.com</a>.<span style="white-space:pre-wrap"> </span>86400<span style="white-space:pre-wrap"> </span>IN<span style="white-space:pre-wrap"> </span>SOA<span style="white-space:pre-wrap"> </span><a href="http://ns5.boxsecured.com" target="_blank">ns5.boxsecured.com</a>. <a href="http://ssuliman.hotmail.co.uk" target="_blank">ssuliman.hotmail.co.uk</a>. <a href="tel:2013082703" target="_blank" value="+12013082703">2013082703</a> 86400 7200 3600000 86400</div>
<div><a href="http://nytimes.com" target="_blank">nytimes.com</a>.<span style="white-space:pre-wrap"> </span>14400<span style="white-space:pre-wrap"> </span>IN<span style="white-space:pre-wrap"> </span>MX<span style="white-space:pre-wrap"> </span>0 <a href="http://nytimes.com" target="_blank">nytimes.com</a>.</div>
<div><a href="http://nytimes.com" target="_blank">nytimes.com</a>.<span style="white-space:pre-wrap"> </span>14356<span style="white-space:pre-wrap"> </span>IN<span style="white-space:pre-wrap"> </span>A<span style="white-space:pre-wrap"> </span>212.1.211.121</div>
<div><a href="http://nytimes.com" target="_blank">nytimes.com</a>.<span style="white-space:pre-wrap"> </span>86400<span style="white-space:pre-wrap"> </span>IN<span style="white-space:pre-wrap"> </span>NS<span style="white-space:pre-wrap"> </span><a href="http://ns5.boxsecured.com" target="_blank">ns5.boxsecured.com</a>.</div>
<div><a href="http://nytimes.com" target="_blank">nytimes.com</a>.<span style="white-space:pre-wrap"> </span>86400<span style="white-space:pre-wrap"> </span>IN<span style="white-space:pre-wrap"> </span>NS<span style="white-space:pre-wrap"> </span><a href="http://ns6.boxsecured.com" target="_blank">ns6.boxsecured.com</a>.</div>
<div><br></div><div>;; AUTHORITY SECTION:</div><div><a href="http://nytimes.com" target="_blank">nytimes.com</a>.<span style="white-space:pre-wrap"> </span>86400<span style="white-space:pre-wrap"> </span>IN<span style="white-space:pre-wrap"> </span>NS<span style="white-space:pre-wrap"> </span><a href="http://ns6.boxsecured.com" target="_blank">ns6.boxsecured.com</a>.</div>
<div><a href="http://nytimes.com" target="_blank">nytimes.com</a>.<span style="white-space:pre-wrap"> </span>86400<span style="white-space:pre-wrap"> </span>IN<span style="white-space:pre-wrap"> </span>NS<span style="white-space:pre-wrap"> </span><a href="http://ns5.boxsecured.com" target="_blank">ns5.boxsecured.com</a>.</div>
<div><br></div><div>;; ADDITIONAL SECTION:</div><div><a href="http://nytimes.com" target="_blank">nytimes.com</a>.<span style="white-space:pre-wrap"> </span>14356<span style="white-space:pre-wrap"> </span>IN<span style="white-space:pre-wrap"> </span>A<span style="white-space:pre-wrap"> </span>212.1.211.121</div>
<div><br></div><div>;; Query time: 93 msec</div><div>;; SERVER: 10.10.10.19#53(10.10.10.19)</div><div>;; WHEN: Tue Aug 27 14:17:37 2013</div><div>;; MSG SIZE rcvd: 210</div><div><br><div><div><div class="h5"><div>On Aug 27, 2013, at 2:09 PM, Grant Ridder <<a href="mailto:shortdudey123@gmail.com" target="_blank">shortdudey123@gmail.com</a>> wrote:</div>
<br></div></div><blockquote type="cite"><div><div class="h5"><div dir="ltr">I think someone hijacked NYTimes dns...<br><br><a href="http://www.chicagotribune.com/business/technology/chi-new-york-times-website-20130827,0,3415996.story" target="_blank">http://www.chicagotribune.com/business/technology/chi-new-york-times-website-20130827,0,3415996.story</a><br>
<br><br>Non-authoritative answer:<br>Name: <a href="http://nytimes.com/" target="_blank">nytimes.com</a><br>Address: 141.105.64.37<br><br>~~~<br>dig any <a href="http://nytimes.com/" target="_blank">nytimes.com</a><br>
<br>; <<>> DiG 9.8.3-P1 <<>> any <a href="http://nytimes.com/" target="_blank">nytimes.com</a><br>
;; global options: +cmd<br>;; Got answer:<br>;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 15335<br>;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 2<br><br>;; QUESTION SECTION:<br>;<a href="http://nytimes.com/" target="_blank">nytimes.com</a>. IN ANY<br>
<br>;; ANSWER SECTION:<br><a href="http://nytimes.com/" target="_blank">nytimes.com</a>. 11560 IN A 141.105.64.37<br><a href="http://nytimes.com/" target="_blank">nytimes.com</a>. 5 IN NS <a href="http://ns1.syrianelectronicarmy.com/" target="_blank">ns1.syrianelectronicarmy.com</a>.<br>
<a href="http://nytimes.com/" target="_blank">nytimes.com</a>. 5 IN NS <a href="http://ns2.syrianelectronicarmy.com/" target="_blank">ns2.syrianelectronicarmy.com</a>.<br><br>;; ADDITIONAL SECTION:<br><a href="http://ns1.syrianelectronicarmy.com/" target="_blank">ns1.syrianelectronicarmy.com</a>. 47 IN A 141.105.64.37<br>
<a href="http://ns2.syrianelectronicarmy.com/" target="_blank">ns2.syrianelectronicarmy.com</a>. 47 IN A 141.105.64.37<br></div></div></div>
_______________________________________________<br>Outages mailing list<br><a href="mailto:Outages@outages.org" target="_blank">Outages@outages.org</a><br><a href="https://puck.nether.net/mailman/listinfo/outages" target="_blank">https://puck.nether.net/mailman/listinfo/outages</a><br>
</blockquote></div><br></div></div></div><br>_______________________________________________<br>
Outages mailing list<br>
<a href="mailto:Outages@outages.org">Outages@outages.org</a><br>
<a href="https://puck.nether.net/mailman/listinfo/outages" target="_blank">https://puck.nether.net/mailman/listinfo/outages</a><br>
<br></blockquote></div><br><br clear="all"><br>-- <br>-george william herbert<br><a href="mailto:george.herbert@gmail.com">george.herbert@gmail.com</a>
</div>