Questions tagged [dns-domain]

A domain name is an identification string that defines a realm of administrative autonomy, authority, or control on the Internet. Domain names are formed by the rules and procedures of the Domain Name System (DNS). Technically, any name registered in the DNS is a domain name.

Filter by
Sorted by
Tagged with
0 votes
1 answer
60 views

Real time domain verification through DV cert or DNS check?

I want to add an extra layer of security/validation into our app/network. I plan to do some mTLS in which we will provide customers with a certificate to use in the TLS handshake. However, I want the ...
  • 101
1 vote
1 answer
123 views

DNS reverse lookup not finding domain name during enumeration

While enumerating a DNS server for a HTB machine, I've tried finding a domain name for 127.0.0.1: ┌──(kali㉿kali)-[~] └─$ dig -x 127.0.0.1 @10.10.11.166 ; <<>> DiG 9.18.1-1-Debian <<...
0 votes
1 answer
74 views

DNS Enumeration by IP Address

I know all baseline steps to do DNS enumeration over a domain. But my questions is: how can I enumerate a server when I do not know which domain it is managing and I only have its IP address? My ...
-2 votes
1 answer
82 views

What TLDs are safe to whitelist?

What top-level domains (TLD) are safe and would be safe for example to whitelist? I guess .gov and .mil are safe? While .com, .net and .org are not since anyone can register those. Is .int safe? And ...
  • 97
0 votes
2 answers
155 views

Why can't I connect to a website via its IP address?

When I type in PowerShell ping security.stackexchange.com ...it gives me the following: Pinging security.stackexchange.com [151.101.193.69] And as far as I understand, this IP address corresponds to ...
0 votes
2 answers
96 views

Is there any domain name one could use as a fake malicious website example?

I'm looking for some domain name whose purpose is to act as a bogus malicious/suspicious/untrusted website or endpoint to be used as an example or in documentation. IANA has reserved example.com for ...
  • 111
0 votes
0 answers
46 views

Blacklist of hostname/IP so user cannot access my server private network?

My Web API acts as a proxy for users to connect to another server: User ➡️ My Server ➡️ Any Internet Server. They do that by specify a hostname ftp.example.com or 111.111.111.111. I do not want them ...
  • 109
23 votes
4 answers
4k views

Why are SSL CAs prohibiting double dash in third and fourth characters?

Digicert has disallowed "double dashes" in the third and fourth characters in new certs: Effective October 1, 2021, for publicly trusted TLS/SSL certificates, we no longer allow the use of ...
  • 1,323
2 votes
0 answers
86 views

All private subdomains found and listed, including those from my home IP

It's been my understanding in the past years that it's not easily possible to find out all the subdomains of a domain (unless these are used publicly, like in hyperlinks, etc), and likewise not easily ...
  • 215
0 votes
3 answers
867 views

Scanning a domain name

When we scan a domain name such as www.nmap.org, Question 1: We are actually scanning the server that the website is hosted on, right? Question 2: If there is another domain hosted on the same server, ...
3 votes
3 answers
208 views

Can a domain be taken by someone else if custom nameservers are misconfigured?

Example: I own the domain example.com. Instead of using the nameservers set up by default by the registrar, I set up my own nameservers on my own machines with bind9. Let's say that at the beginning, ...
0 votes
0 answers
124 views

Is someone using my @domain.com emails for fraud?

I have a TLD, and have set it up to forward any email sent to *@domain.com to myname@domain.com. Over the last week, I've got a handful of emails from Intuit/TurboTax to random names on my domain, e.g....
0 votes
0 answers
96 views

Is it a good idea to use a domain based e-mail accounts to register to financial services?

I normally use my personal email (e.g. @gmail or @yahoo) to create online financial accounts such as online wallets, bank accounts, stock market, and etc. I am currently planning to create an online ...
  • 109
2 votes
2 answers
2k views

How can I block hits to Youtube using iptables?

I want to prevent my daughter from accessing YouTube while she's attending school. So I was thinking to add protections in iptables. Unfortunately, when she goes to YouTube, the DNS resolves to IP ...
0 votes
0 answers
154 views

How does the Amass intel module correlate information?

Can someone explain to me how OWASP Amass correlates information regarding the intel module domain search? As an example, if I run the command: amass intel -d example.com -whois I'll get a list of ...
3 votes
2 answers
1k views

Problems with using a non-reserved top-level domain for local DNS resolution

A network administrator at my organization (let's call him "Bill") wants to configure an internal DNS with the live top-level domain (TLD) .int for internal IP address resolution (for Active ...
  • 175
1 vote
0 answers
223 views

Why are DNS prefetch requests sent in clear text with DNS over HTTPS enabled?

I am trying to understand how DNS-over-HTTPS (DoH) works in both Chrome and Firefox browsers. To do so, I have enabled DoH on each browser and set the DNS provider to Cloudflare DNS servers (1.1.1.1 ...
  • 11
1 vote
1 answer
356 views

Is the _acme-challenge subdomain protected?

I was looking into the DNS-01 challenge of Let's Encrypt, and I had a question about the subdomain process [1]. Let's say, the website example.com gives away free subdomains; what stops me to request ...
  • 15
2 votes
1 answer
538 views

Transfer requests for localhost zone on my bind DNS server

I use Debian stretch and Bind 9.10.3 as my DNS server. Today I saw the following entry in my log file: Apr 17 23:04:22 ns named[111]: client 45.83.65.112#48974 (localhost): transfer of 'localhost/IN'...
  • 123
133 votes
2 answers
25k views

Why is "fhepfcelehfcepfffacacacacacacabn" a top DNS query from my devices?

I recently set up NextDNS on my personal devices to further reduce the amount of tracking and ads I'm exposed to. The service comes with built-in analytics that shows a brief overview of your network ...
  • 852
0 votes
0 answers
338 views

Can you use a domain to forward web traffic at DNS to another domain but still use the MX record for this domain

What I am attempting to do is ensure all ingress web traffic [http(s)] to exampledomain1.com forwards to exampledomain2.com but I still want to use the MX record of exampledomain1.com to point to at ...
2 votes
1 answer
162 views

Is this sufficient to verify a website's domain?

I'm building a browser extension that will run some javascript, which contains some sensitive information (essentially injecting authentication info). Therefore I want to make sure it only executes it ...
  • 1,236
1 vote
1 answer
288 views

Is the "same registrable domain" a sound security basis for cookies?

Unlike other Web standards, HTTP cookies don't use the common definition of the "origin" as with the "same origin policy"; cookies are segregated by domain names and subdomains. (And there is the ...
  • 5,038
0 votes
0 answers
117 views

Risks associated with developers using their own domain for development services

We have some development and test environments using our canonical domain, e.g. dev.example.com. We also use some services from 3rd party providers that have obscure URLs like xjkhasdkjvhas.dns.ashdfb....
  • 1
0 votes
1 answer
141 views

Universal DNS Resolver [closed]

I would like to implement a DNS client which should be able to resolve any valid domain public, private or otherwise (tor,i2p). What's the best way to achieve this? I know that I need to pick a ...
  • 3
0 votes
0 answers
76 views

How do I white list domain in ASG's?

I need to whitelist https://hooks.slack.com in Application Security Group (ASGs). As I have understood ASGs are static and they don't resolve DNS. Then how do I whitelist https://hooks.slack.com ...
  • 101
0 votes
1 answer
355 views

Securing DNS by blocking querys AND responses [Dnscrypt questions]

Visiting facebook.com you will query s.update.fbsbx.com. s.update.fbsbx.com is a CNAME to s.agentanalytics.com. Currently, the only way to block s.agentanalytics.com is to block s.update.fbsbx.com via ...
  • 417
25 votes
3 answers
10k views

Computer name naming convention for security

I've been doing a security audit and found out you can easily identify host roles and running services just by their computer name (using nslookup). I would like to report this so that they use less ...
  • 2,874
1 vote
0 answers
677 views

Why is certificate rejected in firefox, but not IE and Chrome

Question: Is a certificate issued to a subdomain valid for a CNAME in the parent domain assuming a common root CA cert and SAN listing both? (I think the answer is no but I'm uncertain). Is there a ...
  • 19
3 votes
1 answer
964 views

A third party Web site wants me to validate my domain ownership using a TXT record

What are the security risks with adding TXT records for third party tools? Can they get any information back from your servers with adding that record for them? The example below is from the "have i ...
0 votes
1 answer
99 views

DNS cache poisoining prevention by directly using ip instead of url

My basic understanding of DNS cache poisoining is that at some local server the cache is been altered. i.e (some urls will be directed to malicious ip address instead of original). So If I entered ...
1 vote
1 answer
106 views

How can I ensure consistent privacy policy of my DNS server to that of the TLD's privacy policy?

Whenever I query example.com, one of the TLD root servers for .com will be queried for example.com. This query includes my IP address, and in theory could be used to identify my browser session. ...
  • 700
1 vote
2 answers
187 views

Domain name vs IP only hosting?

The DNS resolving process ultimately relies on root servers located in the USA for most extensions (.com and .org root servers for example). Even if the IP addresses of these servers are cached by ...
0 votes
1 answer
167 views

Why are there no browser feature or extension to only check the domain and username to prevent phishing?

One of the recommendations to prevent phishing using look-alike domain names (like www.google.com.phishing.org or IDN homograph attacks) is to use a password manager or a physical security token like ...
  • 183
2 votes
0 answers
120 views

DNS objects in Maltego

I don't understand what is a DNS object in Maltego. I know what is the NS and MX information related to a Domain. However, "to DNS Name [Robtex]" transform gives me many DNS Objects and I don't know ...
  • 121
-1 votes
1 answer
82 views

Whois History resources authentic source

I have couple of doubts related to Whois records. For a particulate domain... How authentic are the Whois records? As per my research the records are not permissible in courts (or at least would ...
2 votes
1 answer
121 views

Can a domain name be trusted?

I'm in need of some distributed processing, the cheapest way for me to get that processing power is renting some dedicated servers from a company with specialized hardware for this. The servers that ...
user avatar
1 vote
1 answer
658 views

What is this phishing technique called using subdomains

I'm writing a blog post analyzing a list of phishing domains and I'm coming across a lot of IDN homograph attack domains and these "subdomain attack domains" but I cannot find the technical/good way ...
  • 158
1 vote
1 answer
128 views

Is there any security reason to prefer local IP address over zeroconf ".local" domain name?

I have some Linux servers on my local network. When I connect to them via SSH or VNC, I can either use the local 10.0.x.x IP address my router assigns, or I can use the zeroconf "hostname.local" ...
  • 607
1 vote
0 answers
330 views

Finding phishing sites to certain domain

My work currently involve finding phishing site to a certain domain/ company. I was wondering if there are some tools/ Online services that I can use to find phishing sites. I would like to know; ...
1 vote
1 answer
313 views

Authoritative DNS server resolve also any other domain - Is that a risk?

In my organization (huge financial institute) there are 4 ns servers that are defined by NS DNS record to be the authoritative DNS servers of all of our public websites. However, I found that those ...
  • 485
1 vote
0 answers
102 views

How to tell if my hosting data is valid or a fake copy

I'm investigating an issue where we have consistent performance issues with our company web host and bad statistcs data in our hosting console. Our hosting provider console says our IP address is one ...
user avatar
8 votes
2 answers
2k views

Why some applications host the API in a different domain?

I have seen a trend of applications moving their APIs to other domains (from api.application.com to api.applicationapi.com). Two examples: 3.basecampapi.com and api.dropboxapi.com Is there a ...
  • 373
0 votes
1 answer
244 views

DNSSEC - does the domain owner owns a key?

The purpose of DNSSEC is to prevent some attacks like cache poisoning so a client can be sure that the answer it gets from a recursive DNS server are correct (the IP is the correct IP). The root DNS ...
0 votes
2 answers
292 views

What is the rationale of binding SSL certificates to a domain name? [duplicate]

As I understand them, SSL certificates contain a domain name, a public key and the giving CA. Why is it important to include a domain name? Why isn't it enough that the CA considers the public key as ...
  • 103
-3 votes
3 answers
3k views

Why can I access a website using its domain name but I cannot when using its IP address directly? [closed]

For my target domain e.g. www.domain.com I find the ip address with ping command but if I browse directly the ip address I obtain an error page. How is it possible? I know that problably the service ...
  • 129
-2 votes
1 answer
312 views

Where is payload reside in a DNS frame when tunneling? [closed]

Can anyone explain me about DNS tunneling? where the TCP/IP packet or payload data injected in a DNS frame? How data get decapsulated in the server side? Explain DNS frame?
  • 111
15 votes
4 answers
3k views

Unauthorized domain comes up as my website [duplicate]

While checking my website's traffic, I found a referring website that had sent over 400 visits to my site. When I clicked on the URL of the referring website, the site looked almost exactly like my ...
-1 votes
3 answers
126 views

Securing Domain Names for Resell [closed]

Is there any reason to why there cannot be a rule/law that prohibits the securing of domain names for resale? E.g A new acquired domain must have a running website within say 1 year or 6 months ...
  • 107
1 vote
1 answer
152 views

How are hackers able to plant Phishing URLs in existing websites? [closed]

As the question says, How are hackers able to plant Phishing URLs in existing websites? And can it be detected?