Questions tagged [dns-domain]
A domain name is an identification string that defines a realm of administrative autonomy, authority, or control on the Internet. Domain names are formed by the rules and procedures of the Domain Name System (DNS). Technically, any name registered in the DNS is a domain name.
140
questions
2
votes
1
answer
63
views
Anything I can do to combat malicious domains?
On Facebook, malware is currently trying to spread itself using the domain googlediver (dot) com, one sample of a malicious url is https://googlediver (dot) com/list-of-traveling-staff , and I believe ...
- 583
0
votes
1
answer
143
views
Since the DS recordset contains all of the child's Key Signing Key, wouldn't the DS recordset be massive and difficult to load for verification?
I'm learning about DNSSEC today but I don't quite understand about how a parent zone would store all of its child's Key Signing Keys (DNSKEY 257) in its DS record set.
As far as I understand, if I ...
- 367
1
vote
2
answers
126
views
Country code top-level domain (ccTLD) hijacking?
Imagine a country ruled by a non-democratic government with an explicit disregard to local and international laws. The national registry for local domains (Country code top-level domains) falls under ...
- 11
0
votes
1
answer
181
views
How secure is my IP address?
I have a public facing IP address setup at a VM in the Google Cloud Platform.
I am wondering, if it is possible as an outsider to take away this public IP, or pretend another computer is this public ...
1
vote
1
answer
221
views
What does a domain seizure entail?
For context, I have limited knowledge pertaining to computer networks, and the recent seizure of z-library brought up some questions I am unsure of, and I can't seem to find much information online.
...
0
votes
1
answer
75
views
Real time domain verification through DV cert or DNS check?
I want to add an extra layer of security/validation into our app/network. I plan to do some mTLS in which we will provide customers with a certificate to use in the TLS handshake. However, I want the ...
- 101
1
vote
1
answer
214
views
DNS reverse lookup not finding domain name during enumeration
While enumerating a DNS server for a HTB machine, I've tried finding a domain name for 127.0.0.1:
┌──(kali㉿kali)-[~]
└─$ dig -x 127.0.0.1 @10.10.11.166
; <<>> DiG 9.18.1-1-Debian <<...
- 113
0
votes
1
answer
308
views
DNS Enumeration by IP Address
I know all baseline steps to do DNS enumeration over a domain. But my questions is: how can I enumerate a server when I do not know which domain it is managing and I only have its IP address?
My ...
- 1
-2
votes
1
answer
294
views
What TLDs are safe to whitelist?
What top-level domains (TLD) are safe and would be safe for example to whitelist?
I guess .gov and .mil are safe?
While .com, .net and .org are not since anyone can register those.
Is .int safe? And ...
- 97
0
votes
2
answers
480
views
Why can't I connect to a website via its IP address?
When I type in PowerShell
ping security.stackexchange.com
...it gives me the following:
Pinging security.stackexchange.com [151.101.193.69]
And as far as I understand, this IP address corresponds to ...
- 103
0
votes
2
answers
357
views
Is there any domain name one could use as a fake malicious website example?
I'm looking for some domain name whose purpose is to act as a bogus malicious/suspicious/untrusted website or endpoint to be used as an example or in documentation.
IANA has reserved example.com for ...
- 111
0
votes
0
answers
75
views
Blacklist of hostname/IP so user cannot access my server private network?
My Web API acts as a proxy for users to connect to another server: User ➡️ My Server ➡️ Any Internet Server. They do that by specify a hostname ftp.example.com or 111.111.111.111. I do not want them ...
- 109
24
votes
4
answers
4k
views
Why are SSL CAs prohibiting double dash in third and fourth characters?
Digicert has disallowed "double dashes" in the third and fourth characters in new certs:
Effective October 1, 2021, for publicly trusted TLS/SSL certificates, we no longer allow the use of ...
- 1,343
2
votes
0
answers
313
views
All private subdomains found and listed, including those from my home IP
It's been my understanding in the past years that it's not easily possible to find out all the subdomains of a domain (unless these are used publicly, like in hyperlinks, etc), and likewise not easily ...
- 215
1
vote
3
answers
3k
views
Scanning a domain name
When we scan a domain name such as www.nmap.org,
Question 1: We are actually scanning the server that the website is hosted on, right?
Question 2: If there is another domain hosted on the same server, ...
- 41
4
votes
3
answers
288
views
Can a domain be taken by someone else if custom nameservers are misconfigured?
Example: I own the domain example.com.
Instead of using the nameservers set up by default by the registrar, I set up my own nameservers on my own machines with bind9. Let's say that at the beginning, ...
- 141
0
votes
0
answers
144
views
Is someone using my @domain.com emails for fraud?
I have a TLD, and have set it up to forward any email sent to *@domain.com to [email protected].
Over the last week, I've got a handful of emails from Intuit/TurboTax to random names on my domain, e.g....
0
votes
0
answers
104
views
Is it a good idea to use a domain based e-mail accounts to register to financial services?
I normally use my personal email (e.g. @gmail or @yahoo) to create online financial accounts such as online wallets, bank accounts, stock market, and etc. I am currently planning to create an online ...
- 109
2
votes
2
answers
2k
views
How can I block hits to Youtube using iptables?
I want to prevent my daughter from accessing YouTube while she's attending school. So I was thinking to add protections in iptables. Unfortunately, when she goes to YouTube, the DNS resolves to IP ...
- 987
0
votes
0
answers
197
views
How does the Amass intel module correlate information?
Can someone explain to me how OWASP Amass correlates information regarding the intel module domain search?
As an example, if I run the command:
amass intel -d example.com -whois
I'll get a list of ...
3
votes
2
answers
3k
views
Problems with using a non-reserved top-level domain for local DNS resolution
A network administrator at my organization (let's call him "Bill") wants to configure an internal DNS with the live top-level domain (TLD) .int for internal IP address resolution (for Active ...
- 175
1
vote
0
answers
348
views
Why are DNS prefetch requests sent in clear text with DNS over HTTPS enabled?
I am trying to understand how DNS-over-HTTPS (DoH) works in both Chrome and Firefox browsers.
To do so, I have enabled DoH on each browser and set the DNS provider to Cloudflare DNS servers (1.1.1.1 ...
- 11
1
vote
1
answer
539
views
Is the _acme-challenge subdomain protected?
I was looking into the DNS-01 challenge of Let's Encrypt, and I had a question about the subdomain process [1].
Let's say, the website example.com gives away free subdomains; what stops me to request ...
- 15
2
votes
1
answer
833
views
Transfer requests for localhost zone on my bind DNS server
I use Debian stretch and Bind 9.10.3 as my DNS server.
Today I saw the following entry in my log file:
Apr 17 23:04:22 ns named[111]: client 45.83.65.112#48974 (localhost): transfer of 'localhost/IN'...
- 123
133
votes
2
answers
25k
views
Why is "fhepfcelehfcepfffacacacacacacabn" a top DNS query from my devices?
I recently set up NextDNS on my personal devices to further reduce the amount of tracking and ads I'm exposed to. The service comes with built-in analytics that shows a brief overview of your network ...
- 852
0
votes
0
answers
387
views
Can you use a domain to forward web traffic at DNS to another domain but still use the MX record for this domain
What I am attempting to do is ensure all ingress web traffic [http(s)] to exampledomain1.com forwards to exampledomain2.com but I still want to use the MX record of exampledomain1.com to point to at ...
2
votes
1
answer
169
views
Is this sufficient to verify a website's domain?
I'm building a browser extension that will run some javascript, which contains some sensitive information (essentially injecting authentication info). Therefore I want to make sure it only executes it ...
- 1,246
2
votes
1
answer
381
views
Is the "same registrable domain" a sound security basis for cookies?
Unlike other Web standards, HTTP cookies don't use the common definition of the "origin" as with the "same origin policy"; cookies are segregated by domain names and subdomains. (And there is the ...
- 5,068
0
votes
0
answers
127
views
Risks associated with developers using their own domain for development services
We have some development and test environments using our canonical domain, e.g. dev.example.com. We also use some services from 3rd party providers that have obscure URLs like xjkhasdkjvhas.dns.ashdfb....
- 1
0
votes
1
answer
156
views
Universal DNS Resolver [closed]
I would like to implement a DNS client which should be able to resolve any valid domain public, private or otherwise (tor,i2p). What's the best way to achieve this?
I know that I need to pick a ...
- 3
0
votes
0
answers
91
views
How do I white list domain in ASG's?
I need to whitelist https://hooks.slack.com in Application Security Group (ASGs). As I have understood ASGs are static and they don't resolve DNS. Then how do I whitelist https://hooks.slack.com ...
- 101
0
votes
1
answer
390
views
Securing DNS by blocking querys AND responses [Dnscrypt questions]
Visiting facebook.com you will query s.update.fbsbx.com. s.update.fbsbx.com is a CNAME to s.agentanalytics.com. Currently, the only way to block s.agentanalytics.com is to block s.update.fbsbx.com via ...
- 435
25
votes
3
answers
11k
views
Computer name naming convention for security
I've been doing a security audit and found out you can easily identify host roles and running services just by their computer name (using nslookup).
I would like to report this so that they use less ...
- 2,904
1
vote
0
answers
859
views
Why is certificate rejected in firefox, but not IE and Chrome
Question:
Is a certificate issued to a subdomain valid for a CNAME in the parent domain assuming a common root CA cert and SAN listing both? (I think the answer is no but I'm uncertain).
Is there a ...
- 19
3
votes
1
answer
1k
views
A third party Web site wants me to validate my domain ownership using a TXT record
What are the security risks with adding TXT records for third party tools? Can they get any information back from your servers with adding that record for them?
The example below is from the "have i ...
- 325
0
votes
1
answer
110
views
DNS cache poisoining prevention by directly using ip instead of url
My basic understanding of DNS cache poisoining is that at some local server the cache is been altered. i.e (some urls will be directed to malicious ip address instead of original).
So If I entered ...
1
vote
1
answer
112
views
How can I ensure consistent privacy policy of my DNS server to that of the TLD's privacy policy?
Whenever I query example.com, one of the TLD root servers for .com will be queried for example.com. This query includes my IP address, and in theory could be used to identify my browser session.
...
- 700
1
vote
2
answers
230
views
Domain name vs IP only hosting?
The DNS resolving process ultimately relies on root servers located in the USA for most extensions (.com and .org root servers for example). Even if the IP addresses of these servers are cached by ...
- 29
0
votes
1
answer
175
views
Why are there no browser feature or extension to only check the domain and username to prevent phishing?
One of the recommendations to prevent phishing using look-alike domain names (like www.google.com.phishing.org or IDN homograph attacks) is to use a password manager or a physical security token like ...
- 183
2
votes
0
answers
143
views
DNS objects in Maltego
I don't understand what is a DNS object in Maltego. I know what is the NS and MX information related to a Domain. However, "to DNS Name [Robtex]" transform gives me many DNS Objects and I don't know ...
- 121
-1
votes
1
answer
97
views
Whois History resources authentic source
I have couple of doubts related to Whois records.
For a particulate domain...
How authentic are the Whois records?
As per my research the records are not permissible in courts (or at least would ...
- 195
2
votes
1
answer
132
views
Can a domain name be trusted?
I'm in need of some distributed processing, the cheapest way for me to get that processing power is renting some dedicated servers from a company with specialized hardware for this.
The servers that ...
user81993
1
vote
1
answer
774
views
What is this phishing technique called using subdomains
I'm writing a blog post analyzing a list of phishing domains and I'm coming across a lot of IDN homograph attack domains and these "subdomain attack domains" but I cannot find the technical/good way ...
- 158
1
vote
1
answer
152
views
Is there any security reason to prefer local IP address over zeroconf ".local" domain name?
I have some Linux servers on my local network. When I connect to them via SSH or VNC, I can either use the local 10.0.x.x IP address my router assigns, or I can use the zeroconf "hostname.local" ...
- 607
1
vote
0
answers
402
views
Finding phishing sites to certain domain
My work currently involve finding phishing site to a certain domain/ company. I was wondering if there are some tools/ Online services that I can use to find phishing sites. I would like to know;
...
- 195
1
vote
1
answer
353
views
Authoritative DNS server resolve also any other domain - Is that a risk?
In my organization (huge financial institute) there are 4 ns servers that are defined by NS DNS record to be the authoritative DNS servers of all of our public websites.
However, I found that those ...
- 485
1
vote
0
answers
107
views
How to tell if my hosting data is valid or a fake copy
I'm investigating an issue where we have consistent performance issues with our company web host and bad statistcs data in our hosting console. Our hosting provider console says our IP address is one ...
user181829
11
votes
2
answers
3k
views
Why some applications host the API in a different domain?
I have seen a trend of applications moving their APIs to other domains (from api.application.com to api.applicationapi.com).
Two examples: 3.basecampapi.com and api.dropboxapi.com
Is there a ...
- 413
0
votes
1
answer
281
views
DNSSEC - does the domain owner owns a key?
The purpose of DNSSEC is to prevent some attacks like cache poisoning so a client can be sure that the answer it gets from a recursive DNS server are correct (the IP is the correct IP). The root DNS ...
- 519
0
votes
2
answers
392
views
What is the rationale of binding SSL certificates to a domain name? [duplicate]
As I understand them, SSL certificates contain a domain name, a public key and the giving CA.
Why is it important to include a domain name?
Why isn't it enough that the CA considers the public key as ...
- 103