How to deal with DNS hijacking?

DNS (Domain Name System, Domain Name System), a distributed database on the Internet that maps domain names and IP addresses to each other, enables users to access the Internet more conveniently without having to remember the IP that can be directly read by machinesnumber string.The process of obtaining the IP address corresponding to the host name through the host name is called domain name resolution (or host name resolution).The DNS protocol runs on top of the UDP protocol and uses port number 53.

The implementation process of visiting a web page:

From the user clicks the mouse, hits Enter, to the web page display, the information will first be sent through the browser, and then routed through the route

Transfer, then DNS resolves the domain name into IP, after finding the server, the server will send the content to the user, and then routed by the route

Forward the data, and finally the browser renders the content to the user.

Check if DNS is hijacked:

Once there is an error in DNS, it will not be able to resolve the domain name into the correct IP address, and we will naturally be unable to access it

The correct page, the target website opened is not the original content, but jumps to an unknown page, even if the terminal uses

Users who enter the correct URL will also be directed to those malicious websites.Therefore, if you find that the web page cannot be opened,

But the network software like QQ, which is directly connected to the IP, can serve normally, so DNS is a very doubtful reason.

DNS hijacking, also known as domain name hijacking.

How to deal with DNS hijacking?

1. Be sure to contact your service provider first to confirm whether the DNS resolution is correct.

2. Modify the domain name management password and website background management password.

3. Check whether the website is hung, poisoned, etc.

4. Search engine maintenance

5. Improve website security

Doing HTTPS transformation and deployment can solve the problem of domain name hijacking to a certain extent, and conditionally deploy Baidu Cloud for the website

Accelerated CDN can solve DDoS and CC attacks, and block hackers from scanning for program vulnerabilities.

IIS7 Website Monitoring

How to fix DNS hijacking:

Option 1: Manually modify the DNS server address

1. Open the start menu and find the control panel

2. Find the network in the control panel and open it

3. Open the Network and Sharing Center on the open page

4. Find local connection Double click to open

5. After opening the local area connection, click the property bar

6. Find Protocol Version 4 on the Properties page and click Properties

7. On the protocol version 4 property page, select and enter the following address, the preferred DNS server: 114.114.114.114; alternate

DNS server: 114.114.115.115 Click to confirm

Option 2: Use Tencent Computer Manager for DNS optimization

1. Open Tencent Computer Manager Toolbox

2. Find the DNS optimization function in the toolbox

3. Open DNS optimization for detection

4. Under DNS attack or threat, choose one-key repair or restore the original DNS