Questions tagged [domain]
The domain tag has no usage guidance.
115
questions
0
votes
1
answer
587
views
Benign, Malicious Domains and Definitions
I am working on a research project where we segregate domains used for malicious purpose from benign domains.
However, my guide does not want the term malicious domain and benign domain in the paper....
- 193
0
votes
3
answers
535
views
Security risks of exposing a VM to single IP address on the Internet
I have a small office network with about 10 workstations and a single physical domain controller. I want to move it to the cloud. For that, I deployed a Windows VM on Azure, which I'm going to promote ...
- 237
1
vote
0
answers
373
views
Finding phishing sites to certain domain
My work currently involve finding phishing site to a certain domain/ company. I was wondering if there are some tools/ Online services that I can use to find phishing sites. I would like to know;
...
- 195
2
votes
2
answers
146
views
Can ISPs be helpful in preventing spam?
I have received a number of phishing emails from various domains. I would like to prevent the domain from sending emails so that other people also don't get taken advantage of.
I have not been ...
0
votes
1
answer
251
views
Domain SSL encryption from client to DNS Server
Im wondering why the domain name is not encrypted when a request do a DNS Server is made. As it seems this is the main weaknesses for internet users.
I came to this when i heard that in germany ...
- 103
2
votes
2
answers
233
views
Does a domain alias give any security against hackers?
We have an app which runs off of a private API. We have a server which hosts the API, as well as an admin panel where staff can log in and make changes to the app's content. The API and admin panel ...
- 155
80
votes
3
answers
10k
views
Possible reason for displaying two different websites on single domain?
This is something interesting.
Try going to http://www.circaventures.com/
You will get a venture capital company.
Now go to google and search "Circa Ventures". The first result you get is the exact ...
- 781
0
votes
1
answer
168
views
Where or how can I get list of domain dependencies of top 100 popular sites? [closed]
For example google.com depends on ssl.gstatic.com, lh3.googleusercontent.com, fonts.gstatic.com.
I need this list for Proxy settings
- 101
7
votes
2
answers
2k
views
Manage SSL certificates for a multi-tenant website
We have given customers the option to allow custom domains which ultimately point to our server by changing the CNAME.
Some of our customers would like to have SSL enabled to their domain but I am ...
0
votes
1
answer
3k
views
how block all subdomains for a particular domain
I want to block all traffic to and from my network to a particular domain. Apparently, this is not possible in Windows, with either a HOSTS file or using firewall rules: the HOSTS file requires every ...
- 125
1
vote
1
answer
299
views
Can the subdomains have different certificates from the main domain if I use HSTS includeSubDomains and preload?
I have a main domain where I serve my website, and then I have subdomains that I use to deploy other projects which may be temporary. Having set up a deployment system with docker and letsencrypt, ...
- 13
1
vote
2
answers
239
views
How do you prevent a computer in a network from accessing RDP?
So you're on a domain.
I know that Remote Desktop needs an authorized user's credentials (e.g admin) to log in with a remote computer. But can you also place a condition that you need to be using a ...
- 145
5
votes
2
answers
243
views
Is there a more secure way for users to log into the domain other than just passwords?
Say you have this:
An NPS server that grants access to users using client certificates (EAP-TLS).
So for example someone managed to snatch the domain administrator's password and they log in to the ...
- 145
1
vote
1
answer
289
views
My company is considering collapsing from multiple independent domains to one trust network
Currently, we have a number of domains for various purposes like back office, production, DMZ, partners, etc. There has been a change in management thinking to simplification. They want all the ...
- 470
6
votes
2
answers
950
views
How can Cloudflare determine the owner of a website?
Assume that we have two websites with two different owners. Both of them set their domain name server to john.ns.cloudflare.com and joly.ns.cloudflare.com. The first owner set both domains in his ...
1
vote
0
answers
126
views
DGA scheme on local network [closed]
Reviewing DNS logs within my company I've found a lot of weird DNS requests from a machine involving what it seems a DGA scheme as shown below (real IP has been obfuscated):
04/07/2017 13:36:47 12C8 ...
- 11
5
votes
3
answers
2k
views
Receiving lots of spam after registering a new domain on GoDaddy
A couple of days ago I have registered a new domain on GoDaddy without WHOIS privacy option. The next day after registration I have started receiving spam in my mailbox as well as on my phone. The ...
- 193
4
votes
1
answer
1k
views
Subdomain takeover due to improper records
INTRO
On hackerone I see a few people writing reports on subdomain takeover due to improper records (CNAME I believe). I want to learn this 'skill' too.
QUESTION
I found a snapchat (sc-cdn.net) ...
- 41
1
vote
1
answer
2k
views
Spam mail "is missing domain" [duplicate]
I just recieved a spam mail. They asked me to "confirm my amazon account / identity". The button links to a subdomain of ad-new.xyz (not sure if I am allowed to post this. Please remove the link if ...
- 111
1
vote
1
answer
136
views
how to investigate diff between theguardian.com and tehguardian.com
One website is the....com the other is teh....com. They display the same content.
The whois data is radically different. Ping reports different IPs.
TheGuardian.com hasn't responded to my request ...
- 19
-1
votes
1
answer
600
views
Unknown website using my domain name [closed]
I own andchat.net which I've left dormant and should not lead to any website. My nameservers were pointing to ns1.linode.com and ns2.linode.com (my previous hosts).
Today I just realized if I visit ...
- 99
0
votes
1
answer
219
views
Viewing local users on a workstation when I'm SYSTEM on Forest PDC
I'm doing some exercises on a challenge lab. I'm SYSTEM on the Forest PDC.
I need to figure out the SID of a local user on a machine in another domain in the forest.
I can get there with PTH and run ...
- 1,427
3
votes
1
answer
695
views
Enumerate forest trust relationships
I'm trying to up my Windows domain enumeration game. I'm doing some exercises where I'm tasked to find the forest trust relationships without exploitation or creds or being on the domain.
All ...
- 1,427
1
vote
1
answer
313
views
What is the effect on a domain when the secondary name server is compromised?
I've heard of a case wherein the domain name of the secondary name server was expired and free to register.
Let's say example.com has two registered nameservers:
example-ns1.com (primary)
example-...
- 6,337
0
votes
2
answers
209
views
Where to find current, live botnet executable clients
I've been able to find readily available botnet source code online however I'm currently working on my university research project and require access to an actual botnet client which encompases DGA's (...
0
votes
1
answer
242
views
How to separate and secure domains using cPanel?
When you add a new domain in some hostings (i.e. 000webhost or some other hostings, which DOESNT USE cPanel) an entirely separate public_html is created (with a separate FTP login and etc..).
But ...
- 2,707
3
votes
0
answers
1k
views
Do I need DNSSEC from GoDaddy?
I just registered a co.uk domain with GoDaddy. I've been managing domains for a few years now, and hosting my own website. I know a bit, but not enough to be safe with anything important like this.
...
- 950
0
votes
1
answer
480
views
What are known domain hijacking methods?
The definition of domain hijacking is: "to gain (temporarily) control a domain" which could be either through:
Stealing the legal and/or technical ownership of a domain (for example by transferring ...
- 6,337
1
vote
2
answers
297
views
Spoofing domain registration date info
Is it possible to spoof or change backwards Domain Registration Date that can be looked up in online whois tools and databases?
- 363
1
vote
1
answer
126
views
Is there any point in activating domain privacy after the fact?
If I have a domain name that does not have privacy protection enabled, is there any point in enabling it now? Or is it useless once the information is out there? I'm asking this because I'm aware that ...
- 113
0
votes
1
answer
215
views
Implications of joining the active directory domain with the domain administrator
I always used the domain administrator to join the active directory domain, but I've never set up more than a few machines. Is that considered a security risk, is the end-user somehow able to obtain ...
- 265
0
votes
1
answer
256
views
How to make an image shown only on a particular domain [closed]
Is there is a secure way that makes an image allowed to display within a particular domain, and preventing it to be shown on any other website?
- 11
0
votes
1
answer
95
views
Information security point of view when registering a domain and chosing a TLD
How much does the choice of the domain registrar and the TLD impact the security of my information?
I've learned that some registrars will require more personal information than others. I even had a ...
- 1,019
8
votes
4
answers
14k
views
A security warning when accessing a site through IP
When I go to https://www.schneier.com/, everything works normal.
As soon as I access the same site using its IP address (66.33.204.254), I get a security warning (even if I write something like https:...
- 185
2
votes
0
answers
822
views
How can I check if a domain is malicious? [closed]
I have started to look for domain names inside my traffic. So I am interested to identify which one is malicious or doing some malicious acitivites.
I know by looking at online web-services such as ...
- 121
1
vote
1
answer
94
views
Custom email domain with a third-party provider: security holes to watch out for? [closed]
If I'm switching to user@example.com emails and using a third-party email service provider that I trust (for example, Google Apps), what potential security threats do I need to secure my system ...
- 2,532
9
votes
1
answer
383
views
Will enforcing this restriction on Domain Admins "break the network"?
Let's say we secure all servers in the domain..
Domain controllers allow RDP access only from jump servers
Domain admins can't connect to non-dc servers
And so forth
This is all swell and should be ...
- 1,550
1
vote
0
answers
82
views
WordPress site sends email from strange domains
I had a WordPress site with a security plugin configured to send me periodical database backups via email. This morning I noticed that I was receiving these emails as coming from two strange domains I ...
- 43
3
votes
1
answer
291
views
Where should we maintain external (subcontractors) usernames and passwords?
We have three environments:
Testing and development
Preproduction
Production
In our company all technical people, including sysadmins and network administrators, are subcontractors so a lot of them (...
- 1,507
0
votes
1
answer
6k
views
How would I find an IP address range of a website or domain?
I would like to find the IP range of a few domains so I can block them in my firewall but I am not quite sure where to start.
user121738
3
votes
1
answer
270
views
Which Extensible Provisioning Protocol (EPP) status-values provide sufficient protection against domain hijacking?
The Extensible Provisioning Protocol (EPP) as described in RFC 5730, can possibly be protective against domain hijacked. The protocol consists of the 17 following status-values as described in RFC ...
- 6,337
5
votes
2
answers
918
views
How much can I trust domain registrars to honor Whois identity protection services?
Domain name registrars offer whois ID protection services. I do plan to use such a service.
But as I'm a relative newbie to the domain name registration world, I don't know whether I can trust it. ...
- 2,532
3
votes
2
answers
3k
views
document.cookie and its scope
There is some basic confusion that I have.
A non-suspecting victim visits a vulnerable website, vulnerable.com and logs in there. vulnerable.com, post login, sends back a response that has the ...
- 1,512
1
vote
1
answer
171
views
Become domain admin by controlling an OU in Active Directory?
Some tools that draw links between objects in a Active Directory architecture, show that if we have an user who is administrator of an OU on which a domain administrator is also present, so he can ...
- 707
0
votes
1
answer
190
views
How come domain resolves to another IP?
I tried to ping http://crashsafari.com in my CMD:
Right there, it resolves http://crashsafari.com to 54.231.48.170 which is
http://s3-website-us-east-1.amazonaws.com.
But,
http://crashsafari.com ...
- 252
0
votes
1
answer
150
views
Why are the domains https.lk , ftp.lk and http.lk restricted on the Sri Lanka domain registry
I found http://nic.lk which is the domain registry for .lk domains (I am in Sri Lanka).I typed in https.lk and it said
'https.lk' Domain name you searched is restricted.
Why is this done. Is it to ...
- 477
0
votes
2
answers
216
views
How does an email provider verify my custom domain name?
I'm new to this and I've read a tutorial on this page: http://www.melyssagriffin.com/use-gmail-custom-domain/
The author of the tutorial wrote about her experiences of setting up a custom domain name ...
- 271
-1
votes
2
answers
3k
views
accessing site with different domain name, is it possible? [closed]
How can someone access my site with different domain name?
i.e.
example.com displayed mysite.com actually...
(at least, i want for local PC purposes).
or how to modify REQUESTS using browser? are ...
- 2,707
3
votes
2
answers
127
views
Transferred domain to new registrar, ordered "id protection", but my info is available in whois
Situation as per the title. How should I approach this to resolve it, am I wrong in thinking the ID protection should make my info not be visible? It's a .net domain.
Edit - the visible details are ...
- 355
6
votes
2
answers
2k
views
Can I use my old SSL certificate with websites in subfolders?
We have a single domain SSL for a website that looks like this:
www.website.company.com
We are going to expand and do following:
www.website.company.com
www.website.company.com/dk
www.website....
