<div dir="ltr">This doesn't look like any kind of DNS attack.<div><br></div><div><a href="http://www.ametx.com">www.ametx.com</a> and <a href="http://aprs-is.net">aprs-is.net</a> are both hosted on the same web server, so it looks like there's some problems happening on the hosting side as far as the web server serving the wrong virtual host domain to clients. </div><div><br></div><div><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature">--<br>Kenneth Finnegan<br><a href="http://blog.thelifeofkenneth.com/" target="_blank">http://blog.thelifeofkenneth.com/</a></div></div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Sat, Jan 8, 2022 at 6:18 PM Earl Needham <<a href="mailto:earl.kd5xb@gmail.com">earl.kd5xb@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">Just for info, I got the AME site a few times as well.<div><br></div><div>In fact, I got it again just now, but a reload got me to aprs-is.</div><div><br></div><div>Vy 7 3</div><div>Earl</div><div>KD5XB</div><div><br></div><div><br></div><div>e e</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Sat, Jan 8, 2022 at 7:12 PM Andrew Pavlin via aprssig <<a href="mailto:aprssig@lists.tapr.org" target="_blank">aprssig@lists.tapr.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:13px"><div></div>
<div dir="ltr">Looks like I had a DNS spoofing attack. After clearing all my nameserver caches and restarting them, I can see the site now. I'm not sure why earlier it was automatically upgrading from http to https to take me to the AME website.</div><div dir="ltr"><br></div><div dir="ltr">Andrew, KA2DDO<br></div><div><br></div>
</div><div id="gmail-m_2088921465539021967gmail-m_-1134316606737627188ydp51c6f537yahoo_quoted_2203962600">
<div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:13px;color:rgb(38,40,42)">
<div>
On Saturday, January 8, 2022, 02:38:04 PM EST, Pete Loveall AE5PL Lists <<a href="mailto:hamlists@ametx.com" target="_blank">hamlists@ametx.com</a>> wrote:
</div>
<div><br></div>
<div><br></div>
<div><div dir="ltr">Working just fine for me. AME Corp. is the base web site for that IP address so if you were going to the IP address or you were trying to use https, you will see the base site, not <a href="http://aprs-is.net" target="_blank">aprs-is.net</a>. Been this way since its inception.<br clear="none"><br clear="none">73,<br clear="none"><br clear="none">Pete Loveall AE5PL<br clear="none">pete at ae5pl dot net<br clear="none"><br clear="none"><br clear="none"><div id="gmail-m_2088921465539021967gmail-m_-1134316606737627188ydp51c6f537yqtfd40711"><br clear="none">-----Original Message-----<br clear="none">From: aprssig <<a shape="rect" href="mailto:aprssig-bounces@lists.tapr.org" rel="nofollow" target="_blank">aprssig-bounces@lists.tapr.org</a>> On Behalf Of Andrew Pavlin via aprssig<br clear="none">Sent: Saturday, January 8, 2022 12:33 PM<br clear="none">To: TAPR APRS Mailing List <<a shape="rect" href="mailto:aprssig@lists.tapr.org" rel="nofollow" target="_blank">aprssig@lists.tapr.org</a>><br clear="none">Subject: [aprssig] who forgot to renew <a href="http://aprs-is.net" target="_blank">aprs-is.net</a>?<br clear="none"><br clear="none">Greetings.<br clear="none"><br clear="none">I was going to visit the <a href="http://aprs-is.net" target="_blank">aprs-is.net</a> website to check a protocol specification, and now it's displaying a webpage for AME Corporation. Did someone forget to renew the domain name lease? Or am I dealing with DNS spoofing?<br clear="none"><br clear="none">Someone might want to check why this corporation is showing up for a ham radio domain name.<br clear="none"><br clear="none">Andrew, KA2DDO<br clear="none">author of YAAC<br clear="none"><br clear="none"></div></div></div>
</div>
</div></div>_______________________________________________<br>
aprssig mailing list<br>
<a href="mailto:aprssig@lists.tapr.org" target="_blank">aprssig@lists.tapr.org</a><br>
<a href="http://lists.tapr.org/mailman/listinfo/aprssig_lists.tapr.org" rel="noreferrer" target="_blank">http://lists.tapr.org/mailman/listinfo/aprssig_lists.tapr.org</a><br>
</blockquote></div>
_______________________________________________<br>
aprssig mailing list<br>
<a href="mailto:aprssig@lists.tapr.org" target="_blank">aprssig@lists.tapr.org</a><br>
<a href="http://lists.tapr.org/mailman/listinfo/aprssig_lists.tapr.org" rel="noreferrer" target="_blank">http://lists.tapr.org/mailman/listinfo/aprssig_lists.tapr.org</a><br>
</blockquote></div>