I'm using duckdns as my free ddns provider. The domain is in the form
I believe it would be technically possible for them to copy the files my server hosts, redirect "my" domain to their own server and create an SSL certificate for it, since they really own the domain.
This way for example, I could connect to the website, the SSL certificate would be valid, I'd input login and password and they could connect to my ip, input the login and passwords themselves and access the data which should be encrypted. Is this correct?
Is there a good way to defend against it?