Collaborate Disseminate
For my target domain e.g. www.domain.com I find the ip address with ping command but if I browse directly the ip address I obtain an error page. How is it possible? I know that problably the service is deployed in Virtual Pri… Continue reading Why can I access a website using its domain name but I cannot when using its IP address directly? [on hold]
Is there any reason to why there cannot be a rule/law that prohibits the securing of domain names for resale? E.g A new acquired domain must have a running website within say 1 year or 6 months otherwise will be made available to other users? And make sure that those found selling domain names are brought down to face a criminal charge? Or people that suspects a a website to be fake should report that domain? I’ve seen most acquired domains always has some generic content related to that domain name with a link that claims this domain is available for sell at GoDaddy or whatever they say.
From a personal point of view, last time I searched for a domain name, it showed it was available, a few minutes later when I tried to register for the domain, it was apparently taken. This shows that now there’s automated systems that listens/monitors to domain searches and automatically registers that domain as their own and later offer the domain for resell.
These are just my 2 cents!
As the question says, How are hackers able to plant Phishing URLs in existing websites? And can it be detected?
Continue reading How are hackers able to plant Phishing URLs in existing websites?
I’m working on a web service. I need a way to verify a user owns a domain they attempt to use in the service.
How can I verify when a user attempts to add a domain to the service that they own the domain?
I have a few ideas… Continue reading How can I verify ownership of a domain
Assume that we have two websites with two different owners. Both of them set their domain name server to john.ns.cloudflare.com and joly.ns.cloudflare.com. The first owner set both domains in his account in CloudFlare and set… Continue reading How can Cloudflare determine the owner of a website?
Reviewing DNS logs within my company I’ve found a lot of weird DNS requests from a machine involving what it seems a DGA scheme as shown below (real IP has been obfuscated):
04/07/2017 13:36:47 12C8 PACKET 0000000005492E80 U… Continue reading DGA scheme on local network
INTRO
On hackerone I see a few people writing reports on subdomain takeover due to improper records (CNAME I believe). I want to learn this ‘skill’ too.
QUESTION
I found a snapchat (sc-cdn.net) domain which is pointing to… Continue reading Subdomain takeover due to improper records
A domain can have plenty of name servers registered at there domain registrar. The name servers are picked randomly and not like expected primary first, secondary second and so on.
Knowing that, does this mean that when one… Continue reading Availability at risk due to one offine Domain Name Server? [migrated]
I just finished reading that the WannaDecryptor malware was querying an unregistered domain. I thought it was connecting to its command and control server. Is this correct?
It is my understanding that if a program of any sor… Continue reading How does Malware use Unregistered Domains
I’ve heard of a case wherein the domain name of the secondary name server was expired and free to register.
Lets say example.com has two registered nameservers:
example-ns1.com (primary)
example-ns2.com (secondary)
The d… Continue reading What is the effect on a domain when the secondary name server is compromised?