lol at a financial site using the free DNS that comes with the domain. I just checked it now and it looks like they've switched to... DigitalOcean's DNS service now. No DNSSEC either.

If you're dealing with finances I probably wouldn't use a registrar with "cheap" in the name>

(Quote)

So it's their accounts at DNS providers like Godaddy, Namecheap, etc, getting hacked/whatever and just changing the ip addresses to the nefarious server.

(Quote)

If an attacker can get into their DNS servers and change the records, they could probably also disable whatever monitoring scripts are being used?

Is there a way to do this in real time? Some crypto projects are having their DNS servers hijacked and re-routing users to compromised front ends/UIs.

@BunnySpeed - Kudos for doing BunnyDNS geocast very well.

Cool. I made this certbot plugin so that you can get wildcard letsencrypt certificates with BunnyDNS:

All he had to do was clear up the old PTR records from spam hosts, they're littering his ranges and making them look pretty bad: https://bgp.he.net/net/5.183.96.0/22#_dns

* Reverse DNS Management

Actually, you said you won't play GOD but it's actually what you're doing with us...

IPv6: 16 IPv6 addresses included Reverse DNS: FREE Our team is 24/7 at your service! 10 free remote hands a month! Free announcing of your PI or own ip's or your ASN B

Or just a DNS manager?

lol stupid typo mistake. had an issue where NS is not responding to my DNS requests. all good now

Also, really glad to hear people enjoy our DNS. There are other big announcements coming soon.

* Reseller Focused & Whitelabelled Service: We can set up custom DNS servers that can be easily connected to all our services. If you upgrade from our reseller hosting to a managed server, you

Delegate the rDNS to their own DNS or provide your own self-service rDNS interface.

That's why we need control or rDNS but still rDNS should be manage my our customers but at least we can check what they are doing.

Maybe I'm a bit naive here, but wouldn't they do that anyway, whether you're running the DNS or not?