2022 Developer Survey is open! Take survey.

Questions tagged [dns-domain]

A domain name is an identification string that defines a realm of administrative autonomy, authority, or control on the Internet. Domain names are formed by the rules and procedures of the Domain Name System (DNS). Technically, any name registered in the DNS is a domain name.

Filter by
Sorted by
Tagged with
-1 votes
0 answers
39 views

How to stop/reduce constant DNS Spoof/Poisoning Attack from NGINX server if DNSSEC is not offered from provider?

Currently my domain is sitting without DNSSEC security because my domain provider didnt support it for my ccTLD domain, the feature will only be available once i renew my domain in about 2 months time....
user avatar
0 votes
1 answer
35 views

DNS Enumeration by IP Address

I know all baseline steps to do DNS enumeration over a domain. But my questions is: how can I enumerate a server when I do not know which domain it is managing and I only have its IP address? My ...
user avatar
-2 votes
1 answer
60 views

What TLDs are safe to whitelist?

What top-level domains (TLD) are safe and would be safe for example to whitelist? I guess .gov and .mil are safe? While .com, .net and .org are not since anyone can register those. Is .int safe? And ...
user avatar
  • 97
0 votes
2 answers
144 views

Why can't I connect to a website via its IP address?

When I type in PowerShell ping security.stackexchange.com ...it gives me the following: Pinging security.stackexchange.com [151.101.193.69] And as far as I understand, this IP address corresponds to ...
user avatar
0 votes
2 answers
89 views

Is there any domain name one could use as a fake malicious website example?

I'm looking for some domain name whose purpose is to act as a bogus malicious/suspicious/untrusted website or endpoint to be used as an example or in documentation. IANA has reserved example.com for ...
user avatar
  • 111
0 votes
0 answers
46 views

Blacklist of hostname/IP so user cannot access my server private network?

My Web API acts as a proxy for users to connect to another server: User ➡️ My Server ➡️ Any Internet Server. They do that by specify a hostname ftp.example.com or 111.111.111.111. I do not want them ...
user avatar
  • 109
24 votes
4 answers
3k views

Why are SSL CAs prohibiting double dash in third and fourth characters?

Digicert has disallowed "double dashes" in the third and fourth characters in new certs: Effective October 1, 2021, for publicly trusted TLS/SSL certificates, we no longer allow the use of ...
user avatar
  • 1,343
2 votes
0 answers
77 views

All private subdomains found and listed, including those from my home IP

It's been my understanding in the past years that it's not easily possible to find out all the subdomains of a domain (unless these are used publicly, like in hyperlinks, etc), and likewise not easily ...
user avatar
  • 215
0 votes
3 answers
502 views

Scanning a domain name

When we scan a domain name such as www.nmap.org, Question 1: We are actually scanning the server that the website is hosted on, right? Question 2: If there is another domain hosted on the same server, ...
user avatar
3 votes
3 answers
205 views

Can a domain be taken by someone else if custom nameservers are misconfigured?

Example: I own the domain example.com. Instead of using the nameservers set up by default by the registrar, I set up my own nameservers on my own machines with bind9. Let's say that at the beginning, ...
user avatar
0 votes
0 answers
120 views

Is someone using my @domain.com emails for fraud?

I have a TLD, and have set it up to forward any email sent to *@domain.com to myname@domain.com. Over the last week, I've got a handful of emails from Intuit/TurboTax to random names on my domain, e.g....
user avatar
0 votes
0 answers
95 views

Is it a good idea to use a domain based e-mail accounts to register to financial services?

I normally use my personal email (e.g. @gmail or @yahoo) to create online financial accounts such as online wallets, bank accounts, stock market, and etc. I am currently planning to create an online ...
user avatar
  • 109
2 votes
2 answers
1k views

How can I block hits to Youtube using iptables?

I want to prevent my daughter from accessing YouTube while she's attending school. So I was thinking to add protections in iptables. Unfortunately, when she goes to YouTube, the DNS resolves to IP ...
user avatar
0 votes
0 answers
136 views

How does the Amass intel module correlate information?

Can someone explain to me how OWASP Amass correlates information regarding the intel module domain search? As an example, if I run the command: amass intel -d example.com -whois I'll get a list of ...
user avatar
3 votes
2 answers
1k views

Problems with using a non-reserved top-level domain for local DNS resolution

A network administrator at my organization (let's call him "Bill") wants to configure an internal DNS with the live top-level domain (TLD) .int for internal IP address resolution (for Active ...
user avatar
  • 175
1 vote
0 answers
193 views

Why are DNS prefetch requests sent in clear text with DNS over HTTPS enabled?

I am trying to understand how DNS-over-HTTPS (DoH) works in both Chrome and Firefox browsers. To do so, I have enabled DoH on each browser and set the DNS provider to Cloudflare DNS servers (1.1.1.1 ...
user avatar
  • 11
1 vote
1 answer
300 views

Is the _acme-challenge subdomain protected?

I was looking into the DNS-01 challenge of Let's Encrypt, and I had a question about the subdomain process [1]. Let's say, the website example.com gives away free subdomains; what stops me to request ...
user avatar
  • 15
2 votes
1 answer
466 views

Transfer requests for localhost zone on my bind DNS server

I use Debian stretch and Bind 9.10.3 as my DNS server. Today I saw the following entry in my log file: Apr 17 23:04:22 ns named[111]: client 45.83.65.112#48974 (localhost): transfer of 'localhost/IN'...
user avatar
  • 123
133 votes
2 answers
25k views

Why is "fhepfcelehfcepfffacacacacacacabn" a top DNS query from my devices?

I recently set up NextDNS on my personal devices to further reduce the amount of tracking and ads I'm exposed to. The service comes with built-in analytics that shows a brief overview of your network ...
user avatar
  • 852
0 votes
0 answers
304 views

Can you use a domain to forward web traffic at DNS to another domain but still use the MX record for this domain

What I am attempting to do is ensure all ingress web traffic [http(s)] to exampledomain1.com forwards to exampledomain2.com but I still want to use the MX record of exampledomain1.com to point to at ...
user avatar
2 votes
1 answer
162 views

Is this sufficient to verify a website's domain?

I'm building a browser extension that will run some javascript, which contains some sensitive information (essentially injecting authentication info). Therefore I want to make sure it only executes it ...
user avatar
  • 1,236
1 vote
1 answer
257 views

Is the "same registrable domain" a sound security basis for cookies?

Unlike other Web standards, HTTP cookies don't use the common definition of the "origin" as with the "same origin policy"; cookies are segregated by domain names and subdomains. (And there is the ...
user avatar
  • 5,018
0 votes
0 answers
117 views

Risks associated with developers using their own domain for development services

We have some development and test environments using our canonical domain, e.g. dev.example.com. We also use some services from 3rd party providers that have obscure URLs like xjkhasdkjvhas.dns.ashdfb....
user avatar
  • 1
0 votes
1 answer
139 views

Universal DNS Resolver [closed]

I would like to implement a DNS client which should be able to resolve any valid domain public, private or otherwise (tor,i2p). What's the best way to achieve this? I know that I need to pick a ...
user avatar
  • 3
0 votes
0 answers
74 views

How do I white list domain in ASG's?

I need to whitelist https://hooks.slack.com in Application Security Group (ASGs). As I have understood ASGs are static and they don't resolve DNS. Then how do I whitelist https://hooks.slack.com ...
user avatar
  • 101
0 votes
1 answer
343 views

Securing DNS by blocking querys AND responses [Dnscrypt questions]

Visiting facebook.com you will query s.update.fbsbx.com. s.update.fbsbx.com is a CNAME to s.agentanalytics.com. Currently, the only way to block s.agentanalytics.com is to block s.update.fbsbx.com via ...
user avatar
  • 411
25 votes
3 answers
9k views

Computer name naming convention for security

I've been doing a security audit and found out you can easily identify host roles and running services just by their computer name (using nslookup). I would like to report this so that they use less ...
user avatar
  • 2,894
1 vote
0 answers
624 views

Why is certificate rejected in firefox, but not IE and Chrome

Question: Is a certificate issued to a subdomain valid for a CNAME in the parent domain assuming a common root CA cert and SAN listing both? (I think the answer is no but I'm uncertain). Is there a ...
user avatar
  • 19
3 votes
1 answer
856 views

A third party Web site wants me to validate my domain ownership using a TXT record

What are the security risks with adding TXT records for third party tools? Can they get any information back from your servers with adding that record for them? The example below is from the "have i ...
user avatar
0 votes
1 answer
99 views

DNS cache poisoining prevention by directly using ip instead of url

My basic understanding of DNS cache poisoining is that at some local server the cache is been altered. i.e (some urls will be directed to malicious ip address instead of original). So If I entered ...
user avatar
1 vote
1 answer
106 views

How can I ensure consistent privacy policy of my DNS server to that of the TLD's privacy policy?

Whenever I query example.com, one of the TLD root servers for .com will be queried for example.com. This query includes my IP address, and in theory could be used to identify my browser session. ...
user avatar
  • 690
1 vote
2 answers
183 views

Domain name vs IP only hosting?

The DNS resolving process ultimately relies on root servers located in the USA for most extensions (.com and .org root servers for example). Even if the IP addresses of these servers are cached by ...
user avatar
0 votes
1 answer
165 views

Why are there no browser feature or extension to only check the domain and username to prevent phishing?

One of the recommendations to prevent phishing using look-alike domain names (like www.google.com.phishing.org or IDN homograph attacks) is to use a password manager or a physical security token like ...
user avatar
  • 173
2 votes
0 answers
117 views

DNS objects in Maltego

I don't understand what is a DNS object in Maltego. I know what is the NS and MX information related to a Domain. However, "to DNS Name [Robtex]" transform gives me many DNS Objects and I don't know ...
user avatar
  • 121
-1 votes
1 answer
80 views

Whois History resources authentic source

I have couple of doubts related to Whois records. For a particulate domain... How authentic are the Whois records? As per my research the records are not permissible in courts (or at least would ...
user avatar
2 votes
1 answer
121 views

Can a domain name be trusted?

I'm in need of some distributed processing, the cheapest way for me to get that processing power is renting some dedicated servers from a company with specialized hardware for this. The servers that ...
user avatar
1 vote
1 answer
644 views

What is this phishing technique called using subdomains

I'm writing a blog post analyzing a list of phishing domains and I'm coming across a lot of IDN homograph attack domains and these "subdomain attack domains" but I cannot find the technical/good way ...
user avatar
  • 158
1 vote
1 answer
128 views

Is there any security reason to prefer local IP address over zeroconf ".local" domain name?

I have some Linux servers on my local network. When I connect to them via SSH or VNC, I can either use the local 10.0.x.x IP address my router assigns, or I can use the zeroconf "hostname.local" ...
user avatar
  • 607
1 vote
0 answers
308 views

Finding phishing sites to certain domain

My work currently involve finding phishing site to a certain domain/ company. I was wondering if there are some tools/ Online services that I can use to find phishing sites. I would like to know; ...
user avatar
1 vote
1 answer
306 views

Authoritative DNS server resolve also any other domain - Is that a risk?

In my organization (huge financial institute) there are 4 ns servers that are defined by NS DNS record to be the authoritative DNS servers of all of our public websites. However, I found that those ...
user avatar
  • 485
1 vote
0 answers
102 views

How to tell if my hosting data is valid or a fake copy

I'm investigating an issue where we have consistent performance issues with our company web host and bad statistcs data in our hosting console. Our hosting provider console says our IP address is one ...
user avatar
8 votes
2 answers
2k views

Why some applications host the API in a different domain?

I have seen a trend of applications moving their APIs to other domains (from api.application.com to api.applicationapi.com). Two examples: 3.basecampapi.com and api.dropboxapi.com Is there a ...
user avatar
  • 373
1 vote
1 answer
240 views

DNSSEC - does the domain owner owns a key?

The purpose of DNSSEC is to prevent some attacks like cache poisoning so a client can be sure that the answer it gets from a recursive DNS server are correct (the IP is the correct IP). The root DNS ...
user avatar
0 votes
2 answers
268 views

What is the rationale of binding SSL certificates to a domain name? [duplicate]

As I understand them, SSL certificates contain a domain name, a public key and the giving CA. Why is it important to include a domain name? Why isn't it enough that the CA considers the public key as ...
user avatar
  • 103
-3 votes
3 answers
2k views

Why can I access a website using its domain name but I cannot when using its IP address directly? [closed]

For my target domain e.g. www.domain.com I find the ip address with ping command but if I browse directly the ip address I obtain an error page. How is it possible? I know that problably the service ...
user avatar
  • 129
-2 votes
1 answer
312 views

Where is payload reside in a DNS frame when tunneling? [closed]

Can anyone explain me about DNS tunneling? where the TCP/IP packet or payload data injected in a DNS frame? How data get decapsulated in the server side? Explain DNS frame?
user avatar
  • 111
15 votes
4 answers
3k views

Unauthorized domain comes up as my website [duplicate]

While checking my website's traffic, I found a referring website that had sent over 400 visits to my site. When I clicked on the URL of the referring website, the site looked almost exactly like my ...
user avatar
-1 votes
3 answers
126 views

Securing Domain Names for Resell [closed]

Is there any reason to why there cannot be a rule/law that prohibits the securing of domain names for resale? E.g A new acquired domain must have a running website within say 1 year or 6 months ...
user avatar
  • 107
1 vote
1 answer
144 views

How are hackers able to plant Phishing URLs in existing websites? [closed]

As the question says, How are hackers able to plant Phishing URLs in existing websites? And can it be detected?
user avatar
0 votes
1 answer
140 views

How can I verify ownership of a domain

I'm working on a web service. I need a way to verify a user owns a domain they attempt to use in the service. How can I verify when a user attempts to add a domain to the service that they own the ...
user avatar
  • 161