We own a primary domain:
I didn't know if our admins had created a sub-domain I had requested, "BDASERVER.businessdts.com.", so I just tried to connect to it with a browser and got a "not found". Then I pinged that sub-domain and got an IP address that doesn't belong to us:
- Pinging BDASERVER.businessdts.com [18.104.22.168] with 32 bytes of data
- Our domain and all sub-domains should have an IP address of [22.214.171.124]
I had the admins check all of our DNS zones and we find no instance of the BDASERVER sub-domain, (the admins had not created it yet), nor did we find any instance of the 126.96.36.199 IP address.
Doing an IP lookup, we found that 188.8.131.52 belongs to a company called Search Guide Inc. (searchguideinc.com). They appear to be a domain broker of some kind.
Am I missing something:
- How is this BDASERVER sub-domain resolving to a address that is not ours?
- How does someone hijack a SUB-domain?