Member of the Month

X_MEMESWERVE_XX
March, 2025

Online

Welcome to the Newschoolers forums! You may read the forums as a guest, however you must be a registered member to post. Register to become a member today!

NS just redirected me to spam

profile picture
Troy.
Posts: 5070 - Karma: 12,549
So, I tried to go to this link from My Threads (https://www.newschoolers.com/forum/thread/807452/Marker-Kingpin-). Briefly loaded the thread, then sent me to this website, which made hella dialogs and I had to force quit Chrome to get out of it. Is that on my computer, or somehow on NS's end?

10 years ago
23 2
profile picture
lcoopman
Posts: 275 - Karma: 1,842
I got some stuff toom
10 years ago
0 0
profile picture
eheath
Posts: 61894 - Karma: 126,024
Just got this while navigating the forum, i dont remember the exact thread but it was in SG i beleive

10 years ago
0 0
profile picture
cornholio
Posts: 3952 - Karma: 3,057
cornholiofirst page i went to this morning in got it..


it almost seems like it's the first time i visit the site each day.
10 years ago
0 0
profile picture
.Rybak.
Posts: 9017 - Karma: 9,869
It happened to me yesterday but this time there was a voice saying that i really needed to call the number on the page.
10 years ago
0 0
profile picture
MOGULS...
Posts: 505 - Karma: 194
.Rybak.It happened to me yesterday but this time there was a voice saying that i really needed to call the number on the page.


Same thing happened to me right about a minute ago. C'mon NS! I expect more from you!
10 years ago
0 0
profile picture
Rparr
Posts: 5737 - Karma: 48,857
Can confirm this is still happening to me too.

It usually happens when I open newschoolers for the first time in a day/ first time in several hours.
10 years ago
0 0
profile picture
NH_OPERATOR
Posts: 1070 - Karma: 2,883
Are these the correct IPs and name servers? DNS hijacking is becoming a more common way to do this kind of thing. Info article on it too http://dyn.com/blog/dns-101-explaining-how-hijacks-can-happen/

DiG 9.8.3-P1 newschoolers.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER
10 years ago
1 0
profile picture
Mr.Bishop
Posts: 22737 - Karma: 76,994
NH_OPERATORAre these the correct IPs and name servers? DNS hijacking is becoming a more common way to do this kind of thing. Info article on it too http://dyn.com/blog/dns-101-explaining-how-hijacks-can-happen/

DiG 9.8.3-P1 newschoolers.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER


That didn't finish posting, can you re-post?
10 years ago
0 0
profile picture
Troy.
Posts: 5070 - Karma: 12,549
NH_OPERATORAre these the correct IPs and name servers? DNS hijacking is becoming a more common way to do this kind of thing. Info article on it too http://dyn.com/blog/dns-101-explaining-how-hijacks-can-happen/

DiG 9.8.3-P1 newschoolers.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER


If you were adding more, then I apologize. This is what I stole from your comments earlier.



DNS hijacking is becoming a more common way to do this kind of thing DiG 9.8.3-P1 newschoolers.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER
10 years ago
0 0
profile picture
MacMahoooon
Posts: 9009 - Karma: 3,305
;; global options: +cmd
;; Got answer:
;; ->>HEADER- opcode: QUERY, status: NOERROR, id: 38960
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 6, ADDITIONAL: 6

;; QUESTION SECTION:
;newschoolers.com. IN A

;; ANSWER SECTION:
newschoolers.com. 86400 IN A 64.93.76.133

;; AUTHORITY SECTION:
newschoolers.com. 86400 IN NS ns15.dnsmadeeasy.com.
newschoolers.com. 86400 IN NS ns13.dnsmadeeasy.com.
newschoolers.com. 86400 IN NS ns12.dnsmadeeasy.com.
newschoolers.com. 86400 IN NS ns14.dnsmadeeasy.com.
newschoolers.com. 86400 IN NS ns10.dnsmadeeasy.com.
newschoolers.com. 86400 IN NS ns11.dnsmadeeasy.com.

;; ADDITIONAL SECTION:
ns10.dnsmadeeasy.com. 77460 IN A 208.94.148.4
ns11.dnsmadeeasy.com. 69731 IN A 208.80.124.4
ns12.dnsmadeeasy.com. 69731 IN A 208.80.126.4
ns13.dnsmadeeasy.com. 69731 IN A 208.80.125.4
ns14.dnsmadeeasy.com. 69731 IN A 208.80.127.4
ns15.dnsmadeeasy.com. 69731 IN A 208.94.149.4
10 years ago
0 0
profile picture
MacMahoooon
Posts: 9009 - Karma: 3,305
Seems to match proper Whois
10 years ago
0 0
profile picture
nopoles
Posts: 2216 - Karma: 886
Yes, those are the correct DNS servers for Newschoolers.com. (I know the message got cut off but Mr.Bishop forwarded me a copy of what you gave him).

The issue seems to be that users are being redirected from an NS page immediately after it loads. A DNS hijack wouldn't cause this, unless it was redirecting visitors to a proxy server that served our page with injected JS, which I think is unlikely. DNS hijacking would usually result in NS being completely unavailable for users affected by the malicious DNS responses. As far as we know, this isn't what users are experiencing.
10 years ago
0 0
profile picture
NH_OPERATOR
Posts: 1070 - Karma: 2,883
If they are doing it smartly, they will know they will get more hits long term from leaving the page working 90% of the time and only redirecting occasionally instead of wholesale redirecting all traffic all the time. You cannot use the whois to verify as they are both pulling from the same location. The system admin would know the proper servers though.

Anyway if you've already ruled out a DNS hijack them it would have to be a serverside issue. I can only help troubleshoot DNS =P
10 years ago
0 0
profile picture
katrina
Posts: 2395 - Karma: 15,195
i assumed it was jointly mine and internet porn's fault, im pleasantly surprised it is not :)
10 years ago
5 0
profile picture
nopoles
Posts: 2216 - Karma: 886
As far as I know *.dnsmadeeasy.com are the correct DNS servers for our domain. Control over our domain name is actually managed by the technical lead at TEN, so I will make 100% certain with them that this is correct. Thanks for the suggestion.
10 years ago
0 0
All times are Eastern (-4); Currently it's 5:05PM