The Syrian Electronic Army claims it's taken over Twitter's domain registration. Indeed, several public Whois listings show email@example.com as the contact information for Twitter.com, which would seem to indicate the hacker group isn't bluffing. Many Twitter users say they're experiencing problems with the service. We've reached out to Twitter, and the company responded that they're "looking into it."
Here's the tweet that alerted the world that something was odd.
Earlier today, SEA (or someone) took over the NYTimes' domain.
The DNS registries don't universally show the odd registration information. These databases update at different times so it makes sense that they might be out of step with each other on a recent change. Here's what the changed domain info looks like. Oddly, some of the original DNS info hasn't changed.
Several of our staff are seeing problems with Twitter, though, I'm not just yet.
Here's what Adam's seeing:
Ashley's Twitter looks like this:
Both the NYTimes.com and Twitter.com show registration through the same registration service.
Registrar: MELBOURNE IT, LTD. D/B/A INTERNET NAMES WORLDWIDE
Whois Server: whois.melbourneit.com
Creation Date: 18-JAN-1994
Updated Date: 27-AUG-2013
Expiration Date: 19-JAN-2014
Looks like they've taken down Twitter.co.uk
Looks like embedded tweets just broke. I had to replace all the embeds on this post with screenshots. Are the walls slowly coming down?
Twitter's domain registration whois information appears to be back to normal Domain Tools—the service SEA linked to—and GODaddy. The GoDaddy registration says the last update was back in April, so it doesn't reflect today's changes. Don't take that to mean that we're out of the fire just yet...
Here's the official word from Twitter. The domain records were modified, but don't worry, your data wasn't compromised. Or that's the party line for now.
At 20:49 UTC, our DNS provider experienced an issue in which it appears DNS records for various organizations were modified, including one of Twitter’s domains used for image serving, twimg.com. Viewing of images and photos was sporadically impacted. By 22:29 UTC, the original domain record for twimg.com was restored. No Twitter user information was affected by this incident.