[tor-talk] DNS hijacking

[Philipp Winter]

On Sun, Apr 05, 2015 at 05:10:19PM +0000, Chuck Peters wrote:
> Philipp Winter said:
> > On Fri, Apr 03, 2015 at 10:15:42PM -0000, throwaway123 at sigaint.org wrote:
> > > It will only happen when using Tor. I did a "normal" DNS dig and a
> > > tor-resolve simultaneously - the first pointing to the real IP, the latter
> > > pointing to said server.
> > 
> > What is the "real" IP address?  All exit relays that are currently
> > online resolve your domain to 185.53.179.29.
> 
> How did you determine the resolution of all exits?  

I used exitmap's DNS module:
<https://gitweb.torproject.org/user/phw/exitmap.git/>

Cheers,
Philipp