Craigslist hacked?

Is anyone else seeing their local craigslist redirected to another site
other than craigslist? I see it loading http://digitalgangster.com/5um.

I can't reach my local one or the Fresno one. Server unreachable.

Not here, spyware maybe?

Comes up normal for me in LA, on twc.

Not seeing that here The local site and the general http;//
www.craigslist.org both look to be going to the correct site.

strange when I go to Boise.craigslist or dayton.craigslist.org I get a site
that shows digital Gangster for life as the title. so do some of the other
tools outside my network.

Same here, New Jersey.

Maybe an area based issue. tons of reports here
http://www.isitdownrightnow.com/craigslist.org.html

down for me and http://www.downforeveryoneorjustme.com/craigslist.org

/kc

*.craigslist.ca and *.craigslist.org have been offline since about 16:40 Pacific Standard Time from at least three different networks I have access to. From the limited poking around I've done it looks like it could be a DNS hijacking.

I haven't seen anything about it on the outages list yet ...

--lyndon

Boston is just fine, and all the links from there, to other craigslist sites seem to be working as well.

Chaim Rieger wrote:

CoSprings list is coming up fine.

Im seeing it resolve to 74.63.219.135 on my network and on
http://whois.domaintools.com/craigslist.org

yes it's been hijacked thru registrar level and someone was able to change
name servers, now it's back to normal but you will need to clear your
caches and perhaps your ISP too. (if you are using 8.8.8.8 , they have
already cleared the caches)

Sponsoring Registrar:Network Solutions, LLC (R63-LROR) seems to be
registrar, would be fun to read the post-mortem.

Is anyone else seeing their local craigslist redirected to another site
other than craigslist? I see it loading digitalgangster dot com Database Error.

Over on [dns-operations]:

I did a cache flush at googledns and it started resolving to a different IP
than the one earlier. Thinking the DNS may have been compromised somewhere.
New IP is 208.91.197.27 old one was 74.63.219.135

Looking at San Diego. Suspecting an issue with Google DNS.

Google--> dig @8.8.8.8 cities.l.craigslist.org. +short
74.63.219.135

My resolver--> dig cities.l.craigslist.org. +short
208.82.238.226

Authoritative--> dig @208.82.236.210 cities.l.craigslist.org. +short +norec
208.82.236.242

and what tasty things did the hijacker's web site serve?

randy

I get the favicon.ico but Chrome says Error code: ERR_CONNECTION_TIMED_OUT

Josh Luthman
Office: 937-552-2340
Direct: 937-552-2343
1100 Wayne St
Suite 1337
Troy, OH 45373

Firefox on my Mac started acting very strangely after encountering one of the 'unresponsive' versions of craigslist.ca. Apparent browser hangs, javascript script timeouts, and odd things related to the browser history.

I restored ~/Library/Application\ Support/Firefox from a Time Machine snapshot taken just before the Craigslist hack, and all appears fine now.

I have to diff between the two versions of that directory before I claim the website hack had anything to do with it, but for now Mac Firefox users might want to be wary ...

(Note: Mac OS 10.9.5 and Firefox 33.1 are what I was running.)

--lyndon