Craigslist down, been hacked.

DomainBop

Dormant VPSB Pathogen
Site no hack, DNS and domain [email protected] 

Yesterday:

Registrant Contact Information:
    Name: craigslist, Inc.
    Organization: craigslist, Inc.

Today

Registrant Name:steven wynhoff @LulzClerk
Registrant Organization:steven wynhoff @LulzClerk

SOA Record – craigslist.org
Name Server     ns01.000webhost.com
Email    [email protected]
 
Last edited by a moderator:

trewq

Active Member
Verified Provider
Site no hack, DNS and domain [email protected] 

Yesterday:

Registrant Contact Information:


    Name: craigslist, Inc.


    Organization: craigslist, Inc.

Today

Registrant Name:steven wynhoff @LulzClerk


Registrant Organization:steven wynhoff @LulzClerk

SOA Record – craigslist.org


Name Server     ns01.000webhost.com


Email    [email protected]
If it was actually him, he's not that bright. I just did a quick google and found a recent dox on pastebin.
 

drmike

100% Tier-1 Gogent
From here:

http://www.securityweek.com/attackers-hijack-craigslist-domain-name

[SIZE=medium]Users looking to visit online classifieds titan Craigslist on Sunday evening were redirected to a site hosted at the domain “DigitalGangster(dot)Com”.[/SIZE]

[SIZE=medium]Assumingly under a heavy load, the server receiving the hijacked traffic was unable to cope with the massive amount of web traffic that Craigslist.org receives and was unable to respond to most web requests.[/SIZE]

[SIZE=medium]Not long after, the attackers apparently changed some settings, and redirected requests for craigslist.org to the New York Times website, after going through a third party click through gateway, which could have been an affiliate link. Soon after that, requests reverted back to the Digital Gangster site, which at the time of publishing still appears to be choking under heavy traffic.[/SIZE]

Domain records indicate that the domain record was modified at 2014-11-24T00:32:41Z, with the domain name registrant currently listed as “steven wynhoff @LulzClerk”.

[SIZE=medium]This is likely a just DNS issue that will be resolved shortly after a call into the domain name registrar (Network Solutions), but fixing the issue completely could take several hours, as it will take time for the settings to propogate across global DNS servers.[/SIZE]

[SIZE=medium]--- snip ---[/SIZE]
 

DomainBop

Dormant VPSB Pathogen
craigslist DNS Outage
At approximately 5pm PST Sunday evening the craigslist domain name service (DNS) records maintained at one of our domain registrars were compromised, diverting users to various non-craigslist sites.

This issue has been corrected at the source, but many internet service providers (ISPs) cached the false DNS information for several hours, and some may still have incorrect information.
http://blog.craigslist.org/2014/11/24/craigslist-dns-outage/

A domain hijacking is a little more than just a "dns outage"... :rolleyes:
 
Last edited by a moderator:

drmike

100% Tier-1 Gogent
Pretty long downtime there for Craigs... Saw a bit earlier it sprang back to life.

May be interesting how the takeover happened if they figure out and are forthcoming about it.

Craigs doesn't do ESCORTS.  Years ago they got rid of those sections as a slew of Attorney Generals from different States were about to take legal action.

They buckled and killed said sections.   That silly stuff migrated over to Backpage.com.  Seems like Backpage is just about solely those types of ads. 
 

KuJoe

Well-Known Member
Verified Provider
On a brighter note. I highly recommend listening to YTCracker's new album "Introducing Neals" or at least watching the video on YouTube (when the traffic brought down DigitalGangster he forwarded the domain to the YouTube video).
 

raindog308

vpsBoard Premium Member
Moderator
On a brighter note. I highly recommend listening to YTCracker's new album "Introducing Neals" or at least watching the video on YouTube (when the traffic brought down DigitalGangster he forwarded the domain to the YouTube video).
I love YT Cracker.  His new web site (just launched this month) is pretty cool, too - javascript implementation of the OS/2 desktop :)

http://www.ytcracker.com/v2014/
 
Top