Problems activating your account? Send notification email to: admin@post4vps.com
Host4Fun Budget VPS Hosting
Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Domain shadowing - beware!
#1
One thing that is important when one buys a domain is to make doubly sure you are the only owner of that domain with exclusive access to the domain credentials - direct ownership.  The best way to ensure this exclusive ownership is to do the sale directly with a well known Registrar such as Namecheap or Namesilo instead of using third parties or affiliates.  Don't use a domain reseller whom you don't know and beware when friends of friends of resellers try and sell you cheap deals.  Like if the price looks too good to be true, there is a very good chance it is too good to be true and you may become an unwitting victim of some or other scam.  I'm not saying that is certain it will happen, but in this day and age of specialist hackers, particularly with domains you need to be vigilant and use lots of common sense.

Domain shadowing is one of the exploits that can happen to you when someone else gets access to your domain registration information. The information can be stolen, but it could also be obtained at the point of sale, like you're not the first owner, but the third party or reseller who sets the domain up for you - makes you into the second owner. Since they then have access to the DNS of your domain they can create sub-domains with it.  They do it with a huge number of victims and through that they have the ability to set up massive lists of subdomains, which they can use in quickly rotating fashion to either redirect victims to attack sites, or to serve as hosts for malicious sites.  Before you know it, your domain and IP get blacklisted and you won't be able to see any signs of hacking or exploits on your VPS as they don't need access to your VPS or server to do their evil deeds.  They do it at the front end of the domain at the Domain Registrar.

So better be safe than sorry.  Don't go for super cheap deals from domain affilliate resellers, or if and when you do, make dead certain you know whom you are dealing with.  Rather insist in creating the domain directly with the Registrar and make sure to keep all of the information safe and secure so no one can get access to the information.  Also check at your Domain Registrar as the really good Registrars will provide you with tools in your Registrar Dashboard with which you can keep your domain safe.  Such as locking it.
Terminal
Thank you to Post4VPS and VirMach for my VPS 9!  I'm finally up and running again after the upgrade to KVM.
Reply
#2
this is correct.
---
i know that it's nothing related to shadowing but more a point of frustration.

mostly when you buy a domain name don't buy them from resellers or sellers that give you minimal to no access.
i once at strato a domain name but my control ability over the domain was basically nothing only thing i was able to do is asign the domain to my vps and then setup dns.
Reply
#3
I’ve seen many sites that do this, quite ridiculous. Many of them are either web hosts, or game server hosts (I have some in mind, not going to name them though as I don’t want to get into any sort of trouble).

I’ve heard that freenom (which is the provider I use for my free .tk domain since I don’t have a credit card to buy a proper .com domain from a trustable registrar) does a similar thing.

Many people complain that once their domains start getting a decent amount of traffic, freenom “magically” de-registers their domains and all of a sudden the domain becomes a paid one which the original owner will be forced to pay for to get it back. Seems more or less a scam to be honest. I used to use my domain for things such as db connections and ssh connections, but now I directly use my VPSs ip just to reduce the traffic going through my domain. I don’t want the same thing happening to me!
Special thanks to Post4VPS and VirMach for providing me with VPS9! It is insanely powerful and fast!
Reply
#4
(03-12-2020, 08:20 AM)ikk157 Wrote:  I’ve seen many sites that do this, quite ridiculous. Many of them are either web hosts, or game server hosts (I have some in mind, not going to name them though as I don’t want to get into any sort of trouble).

I’ve heard that freenom (which is the provider I use for my free .tk domain since I don’t have a credit card to buy a proper .com domain from a trustable registrar) does a similar thing.

Many people complain that once their domains start getting a decent amount of traffic, freenom “magically” de-registers their domains and all of a sudden the domain becomes a paid one which the original owner will be forced to pay for to get it back. Seems more or less a scam to be honest. I used to use my domain for things such as db connections and ssh connections, but now I directly use my VPSs ip just to reduce the traffic going through my domain. I don’t want the same thing happening to me!

Well, freenom logic is simple.
When you get high traffic, they take your site and sell it to advertisment site so they can get money from you if you are really interested in that domain.
Gimme +rep Heart
[Image: img.php?userid=496]
Thanks For Post4VPS and HostLease for the amazing VPS 18
Reply
#5
(03-12-2020, 02:56 PM)youssefbasha Wrote:  Well, freenom logic is simple.
When you get high traffic, they take your site and sell it to advertisment site so they can get money from you if you are really interested in that domain.

That’s kind of unfair and scammy. They never seem to mention that or warn you about it anywhere! (Unless they’ve hid it somewhere).

And honestly if I’m going to end up buying a domain, I’d rather get a proper one from a known and trusted registrar. Not a .tk and most definitely not from freenom!
Special thanks to Post4VPS and VirMach for providing me with VPS9! It is insanely powerful and fast!
Reply
#6
(03-12-2020, 02:56 PM)youssefbasha Wrote:  Well, freenom logic is simple.
When you get high traffic, they take your site and sell it to advertisment site so they can get money from you if you are really interested in that domain.
Exactly as @ikk157 said, then it's a perfect scam instead of being a reputable free domain provider. If you're to spoil the whole idea of a person who might not be able to afford a domain, but has a great potential in his project, then I'd say it's better not to.

I only use Freenom domains for the hostnames of my VPS, since all of my other domains are behind Cloudflare and so no question of cancelling a domain with almost zero traffic. Wink

On a personal note, I'd recommend using a subdomain from https://freedns.afraid.org or https://eu.org if you really can't buy a domain but need a webspace for production purposes. Even if you're to request nameservers access in FreeDNS or wait a fortnight for approval in eu.org, at least it's better than having an instant domain and getting scammed afterwards when you end up losing ownership of that domain which you cherished.

Regards,
Sayan Bhattacharyya,

Heartiest thanks to Post4VPS and Virmach for my wonderful VPS 9!
Reply
 


Forum Jump:


Users browsing this thread: 1 Guest(s)

Sponsors: VirMach - Host4Fun - CubeData - Evolution-Host - HostDare - SSDBlaze - Abc-Hosters - Hyper Expert - Shadow Hosting - Bladenode - Hostlease


About Post4VPS

Post4VPS is a forum/destiny where you can Delploy Your Free VPSs just by the Power of Posts.

We Provide VPSs of many locations like Germany,US,Canada,France,London,etc.

We also Provide VPSs of Both Linux and Windows OS.