Someone was able to hijack a subdomain on my personal website to host a gambling website landing page, presumably because I left it forwarding to GitHub, and GitHub allowed someone else to connect it after I deleted the repository. Check your domains! #webdev #infosec
https://blog.corbin.io/post/772417532865970176/my-domain-got-hijacked-through-github
Corbin Davenport
npub132…sd9dw
2025-01-11 22:35:40 UTC
Author Public Key
npub132zjga4p7u8n3h8ej74xvnen82tke6fda6adpvxuzz478jlruu0q5sd9dwSeen on
wss://relay.momostr.pinkPublished at
2025-01-11 22:35:40 UTCEvent JSON
{
"id": "55c8ef862f1f54e56b2f34e75da578d6046e9a57fb75fa497e16296893dd58e6",
"pubkey": "8a852476a1f70f38dcf997aa664f333a976ce92deebad0b0dc10abe3cbe3e71e",
"created_at": 1736634940,
"kind": 1,
"tags": [
[
"t",
"infosec"
],
[
"proxy",
"https://toot.community/@corbin/113812107478782625",
"web"
],
[
"t",
"webdev"
],
[
"proxy",
"https://toot.community/users/corbin/statuses/113812107478782625",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://toot.community/users/corbin/statuses/113812107478782625",
"pink.momostr"
],
[
"-"
]
],
"content": "Someone was able to hijack a subdomain on my personal website to host a gambling website landing page, presumably because I left it forwarding to GitHub, and GitHub allowed someone else to connect it after I deleted the repository. Check your domains! #webdev #infosec\n\nhttps://blog.corbin.io/post/772417532865970176/my-domain-got-hijacked-through-github",
"sig": "796c70e49844135f88749830dece1f22a515b3d70e3f9270124d7a4db7c912cf5fff8540bf9c455c7ebe20b0677c1244ec21e61c6be180b9f54b557ca12224dd"
}