Malware Domain List

Malware Related => Compromised Servers => Topic started by: john_ on August 03, 2011, 08:11:15 am

Title: Website clones
Post by: john_ on August 03, 2011, 08:11:15 am
I have my website hosted on a dedicated IP. When I checked, other 3 unknown domains appear to be hosted on that IP and these are clones of my site.
My site is cleanbytes.net and the clones are zealusion.com, fringe-fx.info and fringe-fx.og
It seems to be sort of an attack, maybe I have many net "friends". Do you know what kind of DNS attack is this, the hosting company seems to be not guilty about this situation.
Title: Re: Website clones
Post by: MysteryFCM on August 05, 2011, 07:07:15 pm
Is your server configured to return content without requiring a hostname? (seeing this for a while with other sites)
Title: Re: Website clones
Post by: john_ on August 08, 2011, 07:00:37 am
The DNS zone was misconfigured, there were left some entries from the websites preeviously hosted on my dedicated IP. The host was puzzled a bit about this situation but solved it profesionally. In total there were 5 "clones". I was scared for nothing ;D