ETH Limo Nameserver Hijack Via EasyDNS

Eth.limo, a Web2 gateway that enables ENS domains to be accessed over HTTPS, suffered a domain hijack on April 17, 2026. An attacker impersonated a team member and successfully tricked the DNS registrar EasyDNS into carrying out a fraudulent account recovery request.

The attacker then redirected the nameservers as part of a phishing campaign attempt, however, the attack was effectively contained, with resolvers returning SERVFAIL responses, thanks to DNSSEC. EasyDNS regained control of the account and reversed the malicious nameserver changes within eight hours of the incident. EasyDNS CEO Mark Jeftovic publicly apologized for the incident. Eth.limo says it plans to migrate to Domainsure, which eliminates account recovery options.

Sponsored by

Lido Earn lets you deploy ETH or stablecoins into curated DeFi strategies for optimised yield. Two vaults, daily rewards, automatic compounding, and first-loss protection. Get started on stake.lido.fi/earn

Notice - April 20, 2026: EarnETH has direct exposure to rsETH.

Disclaimer: Content is for informational purposes only, not endorsement or investment advice. The accuracy of information is not guaranteed.

More from ETH Daily

Cover image for JP Morgan Buys $102m BMNR Shares

ETH Daily

Nov 8

JP Morgan Buys $102m BMNR Shares

J.P. Morgan acquired 1,974,144 shares of BitMine Immersion Technologies Inc. (BMNR), the world’s largest Ethereum treasury company.

Cover image for Succinct Announces $PROVE Airdrop

ETH Daily

Jul 28

Succinct Announces $PROVE Airdrop

$PROVE is the native token of the Succinct Prover Network and will serve as payment for generating proofs, economic security through staking and slashing, and governance.

Cover image for EigenDA Launches On Holesky Testnet

ETH Daily

Mar 29

EigenDA Launches On Holesky Testnet

Restakers, operators, rollup sequencers, and full nodes can now interact with EigenLayer on Holesky.