TLDR InfoSec · MISCELLANEOUS

I BOUGHT US-EAST-1.COM: A LOOK AT SECURITY, DNS TRAFFIC, AND PROTECTING AWS USERS

dev.to6 min read

Summary from the TLDR InfoSec newsletter

In 2021, Gabriel Koo noticed that the us-east-1.com domain was available and purchased it to prevent potential phishing. The most frequent DNS query that Koo observed was to a presumably production database (prod-backend-db.randomHash.us-east-1.com). Other top queries were to a loopback streaming service, a Cisco static file reputation host, and various cloud storage services. Koo encourages users to utilize tools like Route 53 Resolver DNS Firewall to prevent possible typos like this one.