MoinQ: DNS/ドメイン名/ハイジャック/事例/coincheck.com

1. watchA

メールはgoogleらしい。 ../bitbank.cc

サブドメイン多数。

2. whois

レジストラ変更(移管) 6/3

   Domain Name: COINCHECK.COM
   Registry Domain ID: 80933535_DOMAIN_COM-VRSN
   Registrar WHOIS Server: whois.registrar.amazon.com
   Registrar URL: http://registrar.amazon.com
   Updated Date: 2020-06-03T08:26:38Z
   Creation Date: 2001-12-10T11:05:42Z
   Registry Expiry Date: 2021-12-10T11:05:42Z
   Registrar: Amazon Registrar, Inc.
   Registrar IANA ID: 468
   Registrar Abuse Contact Email:
   Registrar Abuse Contact Phone:
   Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
   Name Server: NS-1515.AWSDNS-61.ORG
   Name Server: NS-1985.AWSDNS-56.CO.UK
   Name Server: NS-405.AWSDNS-50.COM
   Name Server: NS-650.AWSDNS-17.NET
   DNSSEC: unsigned
   URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of whois database: 2020-06-04T22:33:59Z <<<

変更前のレジストラ(gmo)

   Domain Name: COINCHECK.COM
   Registry Domain ID: 80933535_DOMAIN_COM-VRSN
   Registrar WHOIS Server: whois.discount-domain.com
   Registrar URL: http://gmo.jp
   Updated Date: 2020-06-01T11:52:53Z
   Creation Date: 2001-12-10T11:05:42Z
   Registry Expiry Date: 2020-12-10T11:05:42Z
   Registrar: GMO Internet, Inc. d/b/a Onamae.com
   Registrar IANA ID: 49
   Registrar Abuse Contact Email: abuse@gmo.jp
   Registrar Abuse Contact Phone: +81.337709199
   Domain Status: ok https://icann.org/epp#ok
   Name Server: NS-1515.AWSDNS-61.ORG
   Name Server: NS-1985.AWSDNS-56.CO.UK
   Name Server: NS-405.AWSDNS-50.COM
   Name Server: NS-650.AWSDNS-17.NET
   DNSSEC: unsigned
   URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of whois database: 2020-06-02T22:29:03Z <<<

Domain Name: coincheck.com
Registry Domain ID: 80933535_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.discount-domain.com
Registrar URL: http://www.onamae.com
Updated Date: 2020-06-03T15:59:45Z
Creation Date: 2001-12-10T11:05:42Z
Registrar Registration Expiration Date: 2020-12-10T11:05:42Z
Registrar: GMO INTERNET, INC.
Registrar IANA ID: 49
Registrar Abuse Contact Email: abuse@gmo.jp

NSはきちんと設定されている。でも、ロックはない。

https://whoisrequest.com/history/

31 May, 2020
Nameservers
ns-1515.awsdns-061.org
ns-1985.awsdns-056.co.uk

Changes
+ ns-1515.awsdns-061.org
+ ns-1985.awsdns-056.co.uk
- ns-1515.awsdns-61.org
- ns-1985.awsdns-56.co.uk
- ns-405.awsdns-50.com
- ns-650.awsdns-17.net

2 Jun, 2020
Nameservers
ns-1515.awsdns-61.org
ns-1985.awsdns-56.co.uk
ns-405.awsdns-50.com
ns-650.awsdns-17.net

Changes
+ ns-1515.awsdns-61.org
+ ns-1985.awsdns-56.co.uk
+ ns-405.awsdns-50.com
+ ns-650.awsdns-17.net
- ns-1515.awsdns-061.org
- ns-1985.awsdns-056.co.uk

3. history

https://securitytrails.com/domain/coincheck.com/history/ns

• どこから見た情報か。

ns-650.awsdns-17.net
ns-405.awsdns-50.com
ns-1985.awsdns-56.co.uk
ns-1515.awsdns-61.org
        
Amazon.com, Inc.
        2020-06-02 (1 day ago)  2020-06-03 (today)      1 day
----
ns-650.awsdns-017.net
ns-1985.awsdns-056.co.uk
ns-1515.awsdns-061.org
        
Choopa, LLC
Linode, LLC
Advania Island ehf
        2020-05-30 (4 days ago) 2020-06-02 (1 day ago)  3 days
----
ns-650.awsdns-17.net
ns-405.awsdns-50.com
ns-1985.awsdns-56.co.uk
ns-1515.awsdns-61.org
        
Amazon.com, Inc.
        2016-06-26 (3 years ago)        2020-05-30 (4 days ago) 3 years 

CategoryDns CategoryWatch CategoryTemplate