[unisog] Problems with EDU.COM domain

H. Morrow Long morrow.long at yale.edu
Thu Mar 23 21:15:57 GMT 2006


As well as anything at zzz.edu.com such as XXX.ZZZ.EDU.COM

They all resolve to the same IP for me (65.36.156.42).

Thing is, if you use a name it recognizes (www.yale.edu.com)
it presents a Yale University specific web page.  If you use a
name it doesn't ( http://xxx.zzz.edu.com/ ) you just get a
generic advertising page.

- H. Morrow Long, CISSP, CISM, CEH
   University Information Security Officer
   Director -- Information Security Office
   Yale University, ITS



On Mar 23, 2006, at 3:37 PM, David Lundy wrote:

> It looks like a wild card.  Things like zzz.edu.com resolve.
>
> David Lundy
> Acting IT Security Officer
> University of the Pacific
>
>>>> YorkJ at brcc.edu 03/23/06 11:09 AM >>>
> Wow, even lowly community colleges are listed in the phishing sites
> edu.com.  They must have copied the entire .edu domain.  I just called
> Educause (.edu registrar) to let them know about it--the lady I talked
> to hadn't seen it yet, but promised to send the info to their
> management.
> Thanks
> John
>
> John York
> Network Engineer
> Blue Ridge Community College
>
>
> _______________________________________________
> unisog mailing list
> unisog at lists.sans.org
> http://www.dshield.org/mailman/listinfo/unisog
> _______________________________________________
> unisog mailing list
> unisog at lists.sans.org
> http://www.dshield.org/mailman/listinfo/unisog

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.dshield.org/pipermail/unisog/attachments/20060323/c47fb742/attachment.htm


More information about the unisog mailing list