arrow_upward

Pages (2):
Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Domain shadowing - beware!
#1
One thing that is important when one buys a domain is to make doubly sure you are the only owner of that domain with exclusive access to the domain credentials - direct ownership.  The best way to ensure this exclusive ownership is to do the sale directly with a well known Registrar such as Namecheap or Namesilo instead of using third parties or affiliates.  Don't use a domain reseller whom you don't know and beware when friends of friends of resellers try and sell you cheap deals.  Like if the price looks too good to be true, there is a very good chance it is too good to be true and you may become an unwitting victim of some or other scam.  I'm not saying that is certain it will happen, but in this day and age of specialist hackers, particularly with domains you need to be vigilant and use lots of common sense.

Domain shadowing is one of the exploits that can happen to you when someone else gets access to your domain registration information. The information can be stolen, but it could also be obtained at the point of sale, like you're not the first owner, but the third party or reseller who sets the domain up for you - makes you into the second owner. Since they then have access to the DNS of your domain they can create sub-domains with it.  They do it with a huge number of victims and through that they have the ability to set up massive lists of subdomains, which they can use in quickly rotating fashion to either redirect victims to attack sites, or to serve as hosts for malicious sites.  Before you know it, your domain and IP get blacklisted and you won't be able to see any signs of hacking or exploits on your VPS as they don't need access to your VPS or server to do their evil deeds.  They do it at the front end of the domain at the Domain Registrar.

So better be safe than sorry.  Don't go for super cheap deals from domain affilliate resellers, or if and when you do, make dead certain you know whom you are dealing with.  Rather insist in creating the domain directly with the Registrar and make sure to keep all of the information safe and secure so no one can get access to the information.  Also check at your Domain Registrar as the really good Registrars will provide you with tools in your Registrar Dashboard with which you can keep your domain safe.  Such as locking it.
Terminal
Thank you to Post4VPS and VirMach for my awesome VPS 9!  
#2
this is correct.
---
i know that it's nothing related to shadowing but more a point of frustration.

mostly when you buy a domain name don't buy them from resellers or sellers that give you minimal to no access.
i once at strato a domain name but my control ability over the domain was basically nothing only thing i was able to do is asign the domain to my vps and then setup dns.
#3
I’ve seen many sites that do this, quite ridiculous. Many of them are either web hosts, or game server hosts (I have some in mind, not going to name them though as I don’t want to get into any sort of trouble).

I’ve heard that freenom (which is the provider I use for my free .tk domain since I don’t have a credit card to buy a proper .com domain from a trustable registrar) does a similar thing.

Many people complain that once their domains start getting a decent amount of traffic, freenom “magically” de-registers their domains and all of a sudden the domain becomes a paid one which the original owner will be forced to pay for to get it back. Seems more or less a scam to be honest. I used to use my domain for things such as db connections and ssh connections, but now I directly use my VPSs ip just to reduce the traffic going through my domain. I don’t want the same thing happening to me!
Thank you Post4VPS and VirMach for providing me with VPS9! But now it’s time to say farewell due to my studies.
#4
(03-12-2020, 08:20 AM)ikk157 Wrote: I’ve seen many sites that do this, quite ridiculous. Many of them are either web hosts, or game server hosts (I have some in mind, not going to name them though as I don’t want to get into any sort of trouble).

I’ve heard that freenom (which is the provider I use for my free .tk domain since I don’t have a credit card to buy a proper .com domain from a trustable registrar) does a similar thing.

Many people complain that once their domains start getting a decent amount of traffic, freenom “magically” de-registers their domains and all of a sudden the domain becomes a paid one which the original owner will be forced to pay for to get it back. Seems more or less a scam to be honest. I used to use my domain for things such as db connections and ssh connections, but now I directly use my VPSs ip just to reduce the traffic going through my domain. I don’t want the same thing happening to me!

Well, freenom logic is simple.
When you get high traffic, they take your site and sell it to advertisment site so they can get money from you if you are really interested in that domain.
#5
(03-12-2020, 02:56 PM)youssefbasha Wrote: Well, freenom logic is simple.
When you get high traffic, they take your site and sell it to advertisment site so they can get money from you if you are really interested in that domain.

That’s kind of unfair and scammy. They never seem to mention that or warn you about it anywhere! (Unless they’ve hid it somewhere).

And honestly if I’m going to end up buying a domain, I’d rather get a proper one from a known and trusted registrar. Not a .tk and most definitely not from freenom!
Thank you Post4VPS and VirMach for providing me with VPS9! But now it’s time to say farewell due to my studies.
#6
(03-12-2020, 02:56 PM)youssefbasha Wrote: Well, freenom logic is simple.
When you get high traffic, they take your site and sell it to advertisment site so they can get money from you if you are really interested in that domain.
Exactly as @ikk157 said, then it's a perfect scam instead of being a reputable free domain provider. If you're to spoil the whole idea of a person who might not be able to afford a domain, but has a great potential in his project, then I'd say it's better not to.

I only use Freenom domains for the hostnames of my VPS, since all of my other domains are behind Cloudflare and so no question of cancelling a domain with almost zero traffic. Wink

On a personal note, I'd recommend using a subdomain from https://freedns.afraid.org or https://eu.org if you really can't buy a domain but need a webspace for production purposes. Even if you're to request nameservers access in FreeDNS or wait a fortnight for approval in eu.org, at least it's better than having an instant domain and getting scammed afterwards when you end up losing ownership of that domain which you cherished.

Regards,
Sayan Bhattacharyya,

Heartiest thanks to Post4VPS and Virmach for my wonderful VPS 9!
#7
(03-14-2020, 09:16 AM)sohamb03 Wrote: Exactly as @ikk157 said, then it's a perfect scam instead of being a reputable free domain provider. If you're to spoil the whole idea of a person who might not be able to afford a domain, but has a great potential in his project, then I'd say it's better not to.

I only use Freenom domains for the hostnames of my VPS, since all of my other domains are behind Cloudflare and so no question of cancelling a domain with almost zero traffic. Wink

On a personal note, I'd recommend using a subdomain from https://freedns.afraid.org or https://eu.org if you really can't buy a domain but need a webspace for production purposes. Even if you're to request nameservers access in FreeDNS or wait a fortnight for approval in eu.org, at least it's better than having an instant domain and getting scammed afterwards when you end up losing ownership of that domain which you cherished.

Regards,

i agree . freenom will make you lose the domain and pay for it by upgrading to the 'paid' domain , my reccomendation is getting a free domain from github student pack if you are a student . or using the eu.org . but last time i checked eu.org it have ssl issue . make sure you ignore the error to access the website
Terminal
humanpuff69@FPAX:~$ Thanks To Shadow Hosting And Post4VPS for VPS 5
#8
It is sad to know that the domain shadowing issue is quite common nowadays. It does not only affect freenom users but also many others.

So for free domains I get from freenom, I only use them carefully for testing purpose.

And make sure I can afford to lose all these free domains any time. Smile


#9
(05-24-2020, 10:16 AM)tryp4vps Wrote: It is sad to know that the domain shadowing issue is quite common nowadays. It does not only affect freenom users but also many others.

So for free domains I get from freenom, I only use them carefully for testing purpose.

And make sure I can afford to lose all these free domains any time. Smile

i agree . i only use freenom for testing domain or project that is extremely small that 100% will not get huge traffic . for a bigger project i use a proper domain not the freenom domain . my domain shadowed a few time with freenom due to traffic
Terminal
humanpuff69@FPAX:~$ Thanks To Shadow Hosting And Post4VPS for VPS 5
#10
Great point for domain owners, some people offered me that they will point their domain to an ip address which I give them and I can use the domain for my purpose. This kind of offers may backfire you in case your website gets lot of traffic. Another one is early post for domain websites, they give you temporary ownership and can take over the domain later. I don't like purchasing domains from webhosts which are less popular. Purchasing both domain and hosting from same company is a bad idea.
Another thing is first year domain price, some cheap domains cost you very less for first year and second year the price will be huge.
I had a bad experience from hloxindia, a domain registrar who gave offer for 1st year, and blocked me from transferring the domain to a less costly registrar. I never purchased anything from them later. It was a good domain name.


Thank you  Sweet



Pages (2):


person_pin_circle Users browsing this thread: 1 Guest(s)
Sponsors: VirMach - Host4Fun - CubeData - Evolution-Host - HostDare - Hyper Expert - Shadow Hosting - Bladenode - Hostlease - RackNerd - ReadyDedis - Limitless Hosting