HotMail Owned... - UGN Security Forum

Ok, I get a call from my mom today, hotmail won't connect for her. I go and look at the site and sure enough it won't load... So I take and look at the DNS info so I can find who's their host and I see:

HOTMAIL.COM.IS.N0T.AS.1337.AS.GULLI.COM
If you're quick enough to see it before they update it you can go to:
http://www.dollardns.net/cgi-bin/whois/index.pl?server=&query=hotmail.com

Now I go to the site mentioned there and sure enough it's a "very bad website" as many would say...

hmmm, connects for me...

It was completely down this morning :Shrug:

Or dose it... What if they spoofed the site, and are logging email logins

The plot thickens

Quote:

SEATTLE, Washington (AP) -- Microsoft Corp. said Friday that a "significant portion" of people who use the company's Hotmail e-mail system and other Internet-based products were having trouble accessing the services.

The company said it was an internal problem rather than an attack on its system and that it hoped to have service restored by 5:30 p.m. PST.

The problem began about 8:30 a.m. (11:30 EST).

In addition to Hotmail, the popular Web-based e-mail service, Microsoft said people were having trouble accessing products such as company's MSN Messenger instant messaging program.

Malina Bragg, a spokeswoman with Microsoft's Waggener Edstrom public relations firm, said in an e-mail that the company did not know how many people were having trouble but that "it appears to affect a significant portion of our customers."

Bragg said problem appeared to be affecting people who were trying to log on to the system. Those who were able to get on the system did not appear to be having problems sending and receiving e-mail, she said.

Source

what is shown by the hotmail and microsoft results is actually not a hack or anything like that. What you are seeing is that there are multiple entries in the registry that start with "hotmail.com". Only one of them is actually a registered domain. All the rest of them are cleverly named dns servers whose whole purpose in life is to be listed in hotmail.com whois results. Many don't realize that both domains and dns servers are registered. It costs money to register domains, and you may optionally register name servers based on that domain for free.

Ahhh, makes sense. Could this help with other things as well, such as search placement for any sites on the DNS servers?

I realize this topic is pretty old now, but I only just noticed this reply and it's a common question.

There IS a way to find all domains on a given DNS server. This is done by doing a search for all domain assignments to a given dns server in the top-level-domain databases. There are a few tools that already do this out there. I'm even developing one for another company.