# ETH Limo Nameserver Hijack Via EasyDNS

> An attacker impersonated a team member and tricked EasyDNS into executing a fraudulent account recovery, briefly hijacking eth.limo's nameservers.

**Published by:** [ETH Daily](https://ethdaily.io/)
**Published on:** 2026-04-20
**Categories:** news, 2026, april2026, eth-limo, ens, easydns, dns, dnssec, security, phishing, domainsure
**URL:** https://ethdaily.io/eth-limo-nameserver-hijack

## Content

Eth.limo, a Web2 gateway that enables ENS domains to be accessed over HTTPS, suffered a domain hijack on April 17, 2026. An attacker impersonated a team member and successfully tricked the DNS registrar EasyDNS into carrying out a fraudulent account recovery request. The attacker then redirected the nameservers as part of a phishing campaign attempt, however, the attack was effectively contained, with resolvers returning SERVFAIL responses, thanks to DNSSEC. EasyDNS regained control of the account and reversed the malicious nameserver changes within eight hours of the incident. EasyDNS CEO Mark Jeftovic publicly apologized for the incident. Eth.limo says it plans to migrate to Domainsure, which eliminates account recovery options.Sponsored byLido Earn lets you deploy ETH or stablecoins into curated DeFi strategies for optimised yield. Two vaults, daily rewards, automatic compounding, and first-loss protection. Get started on stake.lido.fi/earn Notice - April 20, 2026: EarnETH has direct exposure to rsETH.Disclaimer: Content is for informational purposes only, not endorsement or investment advice. The accuracy of information is not guaranteed.

## Publication Information

- [ETH Daily](https://ethdaily.io/): Publication homepage
- [All Posts](https://ethdaily.io/): More posts from this publication
- [RSS Feed](https://api.paragraph.com/blogs/rss/@ethdaily): Subscribe to updates
- [Twitter](https://twitter.com/intent/follow?screen_name=ethdaily): Follow on Twitter