The Underminr - abusing CDN Shared Infrastructure

Speaker: David Redekop | ADAMnetworks By way of an example, whatismyipaddress.com DNS resolution result can be used to then connect to evilsite.ai. This abuse at the DNS level leads to the following problem we now see widely abused: Source network pDNS only sees known-good domain of whatismyipaddress.com. Destination CDN only sees what appears like a valid connection to evilsite.ai. As our industry attempts to increase trust in DNS, this is a force against that and the degree of the problem needs to be brought to the DNS OARC audience. Presentation Materials available at: https://indico.dns-oarc.net/event/56/contributions/1229 #DNS #OARC46 #DNSSecurity