,
10 tweets,
4 min read
Read on Twitter
Update: There are many things showing up on Clinton’s Bathroom server...
The strangest one is a subdomain with this guy’s name on it!
... this case appears to be what is called ‘Domain Shadowing’.
The strangest one is a subdomain with this guy’s name on it!
... this case appears to be what is called ‘Domain Shadowing’.
Here is an article that describes ‘Domain Shadowing’.
• compromise through phishing
• set-up a subdomain lurking below the parent
• utilize for whatever BS you want
blogs.cisco.com/security/talos…
• compromise through phishing
• set-up a subdomain lurking below the parent
• utilize for whatever BS you want
blogs.cisco.com/security/talos…
Here is an article on how this technique was used on affiliate marketing scams...
unit42.paloaltonetworks.com/takedowns-and-…
unit42.paloaltonetworks.com/takedowns-and-…
These ‘Shadow Domains’ have recently become a big problem; GoDaddy shut down 15k of them earlier this year.
latesthackingnews.com/2019/04/28/god…
latesthackingnews.com/2019/04/28/god…
Idk what the ‘Shadow Domain’ lurking beneath the Clinton Bathroom server (and Podesta Server) was used for, but it appears that is what it is.
At least, at this point, it appears to be remnants of a compromise!
At least, at this point, it appears to be remnants of a compromise!
This is bizarre...
And I don’t know this to be connected, but there were some WEIRD ASS REDIRECTS sent to State Dept.
Here is one regarding ‘GMO Foods’ - looks like the type of affiliate scams described in the articles I linked.
Here is one regarding ‘GMO Foods’ - looks like the type of affiliate scams described in the articles I linked.
@BenKTallmadge @Avery1776 @CarrollQuigley1 @themarketswork
Just FYI material - not conclusive yet, but looks like we’re narrowing in.
Just FYI material - not conclusive yet, but looks like we’re narrowing in.
cc: @Brett_Shavers
