Reply
Visitor
Agent86
Posts: 2
Registered: ‎07-29-2012
Accepted Solution

Norton DNS black hole - Redirecting websites to Edgekey.net

[ Edited ]

Good morning.

 

Yesterday afternoon I was checking if a program was secure (from the Norton 360 interface, I clicked on check and it opened a website to Norton Website, like it should), when I got a message from Norton DNS stating that website was in fact not secure (the own Norton website). I thought it was a temporary problem and forgot about it.

 

But for the last hour I was getting Norton DNS messages alerting for the fact that several known websites were insecure (Juniper Networks, the own Norton website and so on). I have Norton 360 + Prevx 3.0 and had received no warning whatsoever. I ran a Norton quick scan virus and Prevx Scan just to make 100% sure it was not a redirect virus and found no Spyware or Malware (aside from the usual "tracking cookies").

 

Then I ran some traceroute to the URL's, and Norton DNS was resolving the URL to an IP address belonging to Symantec corporation: 198.153.192.41 

 

After that I changed the DNS to Comodo and everything seems OK until now.

 

Is/Has anyone experiencing this issue (Norton DNS users) ?

 

I'll leave some screenshots of the problem (Norton DNS message and traceroute):

 

Edgekey DNS Norton.png

 

 Edgekey Norton classification.png

 

 

 www.juniper.net editado.pngwww.symantec editado.png

 

 

 


 

 Kind Regards.

 

 

 

 

 


Newbie
El_Raberto
Posts: 1
Registered: ‎07-30-2012

Re: Norton DNS black hole - Redirecting websites to Edgekey.net

Same for me this morning, no problems previously. I get the same error displayed  when visiting a bunch of well known sites like carphone warehouse and Nortons but not others. Disabled DNS and accessed all sites as normal but defeats the purpose.

Visitor
linuxadmin
Posts: 5
Registered: ‎07-30-2012

Re: Norton DNS black hole - Redirecting websites to Edgekey.net

Same problem: well known websites suddenly are blocked:

 

www.carphonewarehouse.com
www.emc.com
global.sky.com
www.vauxhall.co.uk

us.norton.com

www.easyjet.com

etc...

 

Visitor
linuxadmin
Posts: 5
Registered: ‎07-30-2012

Re: Norton DNS black hole - Redirecting websites to Edgekey.net

[ Edited ]

All blocked websites are aliases to the edgekey.net domain which is owned by Akamai and

is currently blocked by Norton DNS.

A large number of companies use their services so the problem is affecting many websites.

 



Visitor
iateyourham
Posts: 6
Registered: ‎06-26-2011

Re: Norton DNS black hole - Redirecting websites to Edgekey.net

Is this going to get fixed?  I hate not using norton dns but right now I can't even get to verizon.

 

Visitor
linuxadmin
Posts: 5
Registered: ‎07-30-2012

Re: Norton DNS black hole - Redirecting websites to Edgekey.net

[ Edited ]
@iateyourham:

I hope it gets fixed very soon. Despite having "admin" in my username (not a good choice now I realize :-)) I'm not working for symantec. The only thing I can do is to wait...
Newbie
wmcharrison
Posts: 1
Registered: ‎07-30-2012

Re: Norton DNS black hole - Redirecting websites to Edgekey.net

This morning for the first time I encountered a Norton DNS warning that my attempt to connect to American Airlines at www.aa.com was redeirected to a malicious website www.aa.com.edgekey.net.   When I tried to access the Symantec website (www.symantec.com) to check out the threat I got a similar message about that website.  What's up with that?

 

 

Symantec Employee
KatieQ
Posts: 4,156
Registered: ‎04-09-2009

Re: Norton DNS black hole - Redirecting websites to Edgekey.net

[ Edited ]

Thanks for the posts.  The issue has been corrected.  Please confirm if the new update has resolved the issue.

 

 

Thanks,

Katie

Newbie
amirsepa
Posts: 2
Registered: ‎07-30-2012

Re: Norton DNS black hole - Redirecting websites to Edgekey.net

I was having the same problem this morning. Can we get an update?

 

Was this a configuration issue or was this an actuall attack?

 

Do i need to change passwords for all the sites that i was failing to log into... until i realized other sites where resolving to malware sites, something had happened to my DNS...

 

thanks

Symantec Employee
KatieQ
Posts: 4,156
Registered: ‎04-09-2009

Re: Norton DNS black hole - Redirecting websites to Edgekey.net

Hi Amirsepa,

 

Are you still experiencing the issue at the moment?  Could you please check it again now?

 

 

Thanks,

Katie