<div dir="ltr">I've been following Brian Krebs' comments and on-going analysis over Twitter this afternoon. Sounds like a Registrar may have been compromised, but he hasn't commented since asking that question / making that hypothesis. </div>
<div class="gmail_extra"><br><br><div class="gmail_quote">On Tue, Aug 27, 2013 at 6:36 PM, Chad Smith <span dir="ltr"><<a href="mailto:chad78@gmail.com" target="_blank">chad78@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">







<p>You can still get to the NYT if you really want to.  Just use their IP address (they are still updating content.  In fact, one of the top headlines is about their site getting hacked.)</p><p><a href="http://170.149.168.130" target="_blank">http://170.149.168.130</a></p>


<p>To navigate, you have to replace the <a href="http://nytimes.com" target="_blank">nytimes.com</a> part of every link with the IP</p><p>The link to the story about the website being down (on the website that is down) is <a href="http://170.149.168.130/2013/08/28/business/media/hacking-attack-is-suspected-on-times-web-site.html" target="_blank">http://170.149.168.130/2013/08/28/business/media/hacking-attack-is-suspected-on-times-web-site.html</a></p>


<div class="gmail_extra"><div><font size="4"><i><span style="font-family:garamond,serif">-</span><font style="font-family:garamond,serif"> Chad W. Smith</font></i></font><div><font size="1"></font></div></div><div><div class="h5">

<br><br><div class="gmail_quote">On Tue, Aug 27, 2013 at 5:32 PM, Jon Stanford <span dir="ltr"><<a href="mailto:jbirdvegas@aokp.co" target="_blank">jbirdvegas@aokp.co</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">


Hahahahhahahhaahha I'm loving watching this go down. Too funny<br>
<div><div><br>
Dave Brockman <<a href="mailto:dave@brockmans.com" target="_blank">dave@brockmans.com</a>> wrote:<br>
<br>
>-----BEGIN PGP SIGNED MESSAGE-----<br>
>Hash: SHA1<br>
><br>
>On 8/27/2013 6:19 PM, Dave Brockman wrote:<br>
>> Yeah, the last time the site loaded it had a big "Hacked by SEA"<br>
>> Graphic on it.  DNS, Nameservers, and now apparently WHOIS have<br>
>> changed several times this afternoon.<br>
>><br>
>> Quite entertaining....<br>
>><br>
>> Regards,<br>
>><br>
>> dtb<br>
><br>
><br>
>Oh!  And Twitter got hit among others.... nice!<br>
><br>
>NYT is trying to regain control, but their glue records are missing at<br>
>the moment.  Fun, fun!<br>
><br>
>Regards,<br>
><br>
>dtb<br>
>-----BEGIN PGP SIGNATURE-----<br>
>Version: GnuPG v2.0.17 (MingW32)<br>
>Comment: Using GnuPG with Thunderbird - <a href="http://www.enigmail.net/" target="_blank">http://www.enigmail.net/</a><br>
><br>
>iQEcBAEBAgAGBQJSHSbgAAoJEMP+wtEOVbcdsYsH/3O7fF88BNCNRXBkVE5e5O47<br>
>6pv/STjMWtChO5Y/nL82jAd8P5G1JNUE9VESbtDplsAJt7a96O1TbfAzIAlyMPfv<br>
>GIQEz3f/IFLiMtWdbCtzBXBfjt/5D2OyNt5EqPxXu5OG4ZkOXvriMQ4avzWjNOyT<br>
>69dbt502ZPJYTkgfpuOusBKx1CS8wkBlJitlPYAFaX9HR9tTdG8Sdf8AshAlM3LO<br>
>7p0gZ3ZhGroFKTtGKrq3EQRh2AmlpEer2VNqVgl6tj2wS4LmfQXTs//jMrcChnJT<br>
>cEpcJbp8ZTD9/2kbPMjyXwy2YjH8tt4d1urdubrsoOSnMO8iw49T/pG35JWTeU0=<br>
>=QbIm<br>
>-----END PGP SIGNATURE-----<br>
>_______________________________________________<br>
>Chugalug mailing list<br>
><a href="mailto:Chugalug@chugalug.org" target="_blank">Chugalug@chugalug.org</a><br>
><a href="http://chugalug.org/cgi-bin/mailman/listinfo/chugalug" target="_blank">http://chugalug.org/cgi-bin/mailman/listinfo/chugalug</a><br>
_______________________________________________<br>
Chugalug mailing list<br>
<a href="mailto:Chugalug@chugalug.org" target="_blank">Chugalug@chugalug.org</a><br>
<a href="http://chugalug.org/cgi-bin/mailman/listinfo/chugalug" target="_blank">http://chugalug.org/cgi-bin/mailman/listinfo/chugalug</a><br>
</div></div></blockquote></div><br></div></div></div></div>
<br>_______________________________________________<br>
Chugalug mailing list<br>
<a href="mailto:Chugalug@chugalug.org">Chugalug@chugalug.org</a><br>
<a href="http://chugalug.org/cgi-bin/mailman/listinfo/chugalug" target="_blank">http://chugalug.org/cgi-bin/mailman/listinfo/chugalug</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div dir="ltr"><div><div style="font-family:arial;font-size:small">David White</div><div style="font-family:arial;font-size:small">Founder & CEO<br></div>
<div style="font-family:arial;font-size:small"><b><br></b></div><div style="font-family:arial;font-size:small"><div><b>Develop CENTS </b><br></div><div>Computing, Equipping, Networking, Training & Supporting </div><div>
Nonprofit Organizations Worldwide</div><div><a href="http://developcents.com/" style="color:rgb(17,85,204)" target="_blank">http://developcents.com</a></div><div>423-693-4234</div></div></div><div style="padding:0px;margin-left:0px;margin-top:0px;overflow:hidden;word-wrap:break-word;color:black;font-size:10px;text-align:left;line-height:130%">
</div></div>
</div>