5
Cryptojacking: ocsp.digicert.com blocked by CNAME
ocsp.digicert.comis bocked by CNAMEs:
fp2e7a.wpc.2be4.phicdn.net
fp2e7a.wpc.phicdn.netReported it upstream:
https://github.com/hoshsadiq/adblock-nocoin-list/issues/451#issuecomment-1506571889
dig ocsp.digicert.com
; <<>> DiG 9.16.37-Debian <<>> ocsp.digicert.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 45021
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;ocsp.digicert.com. IN A
;; ANSWER SECTION:
ocsp.digicert.com. 21219 IN CNAME ocsp.edge.digicert.com.
ocsp.edge.digicert.com. 21232 IN CNAME fp2e7a.wpc.2be4.phicdn.net.
fp2e7a.wpc.2be4.phicdn.net. 3484 IN CNAME fp2e7a.wpc.phicdn.net.
fp2e7a.wpc.phicdn.net. 2375 IN A 192.229.221.95
;; Query time: 19 msec
;; SERVER: 208.67.222.222#53(208.67.222.222)
;; WHEN: Thu Apr 13 10:32:40 CEST 2023
;; MSG SIZE rcvd: 1513 replies
-
Early reports encountering the same (presumably) FP behavior: https://help.nextdns.io/t/60hck3l
Relevant information from DigiCert:https://knowledge.digicert.com/alerts/new-dedicated-ip-addresses.html
-
https://github.com/hectorm/hblock/issues/126
hblock is also blocking this. Submitted an issue on their github.
-
hblock updated on Nextdns and now these urls don't look to be blocked by hblock.
Content aside
-
5
Likes
- 5 mths agoLast active
- 3Replies
- 365Views
-
3
Following