# ETH Limo Nameserver Hijack Via EasyDNS

*An attacker impersonated a team member and tricked EasyDNS into executing a fraudulent account recovery, briefly hijacking eth.limo's nameservers.*

By [ETH Daily](https://ethdaily.io) · 2026-04-20

news, 2026, april2026, eth-limo, ens, easydns, dns, dnssec, security, phishing, domainsure

---

Eth.limo, a Web2 gateway that enables ENS domains to be accessed over HTTPS, [suffered](https://x.com/eth_limo/status/2045413512986411467) a domain hijack on April 17, 2026. An attacker impersonated a team member and successfully tricked the DNS registrar EasyDNS into carrying out a fraudulent account recovery request.

The attacker then redirected the nameservers as part of a phishing campaign attempt, however, the attack was effectively contained, with resolvers returning SERVFAIL responses, thanks to DNSSEC. EasyDNS [regained](https://x.com/easyDNS/status/2045547328870756595) control of the account and reversed the malicious nameserver changes within eight hours of the incident. EasyDNS CEO Mark Jeftovic publicly apologized for the incident. Eth.limo [says](https://x.com/eth_limo/status/2045552916157563148) it plans to migrate to Domainsure, which eliminates account recovery options.

* * *

Sponsored by
------------

[![Lido Earn](https://storage.googleapis.com/papyrus_images/81f33d00a6b2ca439a0c600e476f7ed085d865617c3c00a46875ed73b4c50710.jpg)](https://stake.lido.fi/earn)

Lido Earn lets you deploy ETH or stablecoins into curated DeFi strategies for optimised yield. Two vaults, daily rewards, automatic compounding, and first-loss protection. Get started on [stake.lido.fi/earn](https://stake.lido.fi/earn)

Notice - April 20, 2026: [**EarnETH has direct exposure to rsETH**](https://x.com/LidoFinance/status/2046250840961216965).

* * *

Disclaimer: Content is for informational purposes only, not endorsement or investment advice. The accuracy of information is not guaranteed.

---

*Originally published on [ETH Daily](https://ethdaily.io/eth-limo-nameserver-hijack)*