TLDR InfoSec · MISCELLANEOUS
I BOUGHT US-EAST-1.COM: A LOOK AT SECURITY, DNS TRAFFIC, AND PROTECTING AWS USERS
Summary from the TLDR InfoSec newsletter
In 2021, Gabriel Koo noticed that the us-east-1.com domain was available and purchased it to prevent potential phishing. The most frequent DNS query that Koo observed was to a presumably production database (prod-backend-db.randomHash.us-east-1.com). Other top queries were to a loopback streaming service, a Cisco static file reputation host, and various cloud storage services. Koo encourages users to utilize tools like Route 53 Resolver DNS Firewall to prevent possible typos like this one.