Re: Charter DNS servers returning invalid IP addresses

2023-11-01 Thread Jason J. Gullickson via NANOG
This is very interesting. I did some poking-around and found other Squarespace customers with similar issues (in their case it was Google complaining that their sites were suspicious and therefore couldn't serve Google ads). The leading theory is that the "canned" Squarespace sites are using

Re: Charter DNS servers returning invalid IP addresses

2023-10-27 Thread John Levine
It appears that J. Hellenthal via NANOG said: >-=-=-=-=-=- > >Maybe the site "has/had" a shopping cart infection at one point that has been >found and eradicated at one point ? Virustotal reported it four days ago, which suggests that whatever was wrong with it is still wrong with it, The

Re: Charter DNS servers returning invalid IP addresses

2023-10-26 Thread Bjørn Mork
"Jason J. Gullickson via NANOG" writes: > I've been working for a week or so to solve a problem with DNS > resolution for Charter customers for our domain bonesinjars.com. I've > reached-out to Charter directly but since I'm not a customer I > couldn't get any help from them. I was directed by

Re: Charter DNS servers returning invalid IP addresses

2023-10-25 Thread Bryan Fields
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 10/25/23 8:24 PM, Greg Dickinson wrote: > He didn’t, I was just referencing Mimecast to indicate it was probably > larger than Charter’s DNS. Given the reports that someone else gave from > Virustotal, it seems it’s more widespread than first

Re: [EXTERNAL] Re: Charter DNS servers returning invalid IP addresses

2023-10-25 Thread Bryan Fields
On 10/25/23 4:58 PM, Compton, Rich A wrote: > Charter uses threat intel from Akamai to block certain "malicious" domains. Does charter do this on signed domains too? -- Bryan Fields 727-409-1194 - Voice http://bryanfields.net

RE: Charter DNS servers returning invalid IP addresses

2023-10-25 Thread Greg Dickinson
[mid:ac0798f5d04aec2c4c40f9c44056646c8ba72bfb332f7f64d451d99665886...@getboxer.com/image001.png@01D2DDE3.06E76B70] From: NANOG On Behalf Of Bryan Fields Sent: Wednesday, October 25, 2023 2:51 PM To: nanog@nanog.org Subject: Re: Charter DNS servers returning invalid IP addresses This Message originates from outside Bryant Bank. Please use

Charter DNS servers returning invalid IP addresses

2023-10-25 Thread Sylvain BAYA
Dear NANOG-er, Hope this email finds you in good health! Please see my comments below, inline... Thanks, Le 25/10/2023 à 18:50, Jason J. Gullickson via NANOG a écrit : I've been working for a week or so to solve a problem with DNS resolution for Charter customers for our domain

Re: [EXTERNAL] Re: Charter DNS servers returning invalid IP addresses

2023-10-25 Thread Compton, Rich A
VirusTotal and other domain reputation sites say the domain is malicious. Specifically there have been multiple malware samples that were scanned (latest was 10-09-2023) that had this domain hard coded in it. https://www.virustotal.com/gui/domain/bonesinjars.com You may want to get a new

Re: Charter DNS servers returning invalid IP addresses

2023-10-25 Thread Bryan Fields
On 10/25/23 2:41 PM, Greg Dickinson wrote: If it helps troubleshooting, when I click the domain in the email Mimecast tells me: “We checked the website you are trying to access for malicious and spear-phishing content and found it likely to be unsafe.” I saw nothing referencing Mimecast in

Re: Charter DNS servers returning invalid IP addresses

2023-10-25 Thread Jason J. Gullickson via NANOG
spear-phishing content and found it likely to be unsafe." Greg Dickinson, CCNA Network Engineer From: NANOG On Behalf Of Mark Andrews Sent: Wednesday, October 25, 2023 1:27 PM To: Jason J. Gullickson Cc: nanog@nanog.org Subject: Re: Charter DNS servers returning invalid IP addresses Th

RE: Charter DNS servers returning invalid IP addresses

2023-10-25 Thread Greg Dickinson
[mid:ac0798f5d04aec2c4c40f9c44056646c8ba72bfb332f7f64d451d99665886...@getboxer.com/image001.png@01D2DDE3.06E76B70] From: NANOG On Behalf Of Mark Andrews Sent: Wednesday, October 25, 2023 1:27 PM To: Jason J. Gullickson Cc: nanog@nanog.org Subject: Re: Charter DNS servers returning invalid IP addresses This Message originates from

Re: Charter DNS servers returning invalid IP addresses

2023-10-25 Thread Mark Andrews
It’s being filtered. Only Charter can tell you why. -- Mark Andrews > On 26 Oct 2023, at 05:07, Jason J. Gullickson via NANOG > wrote: > >  > I've been working for a week or so to solve a problem with DNS resolution for > Charter customers for our domain bonesinjars.com. I've reached-out

Charter DNS servers returning invalid IP addresses

2023-10-25 Thread Jason J. Gullickson via NANOG
I've been working for a week or so to solve a problem with DNS resolution for Charter customers for our domain bonesinjars.com. I've reached-out to Charter directly but since I'm not a customer I couldn't get any help from them. I was directed by a friend to this list in hopes that there