indianajson / can-i-take-over-dns

"Can I take over DNS?" — a list of DNS providers and how to claim (sub)domains via missing hosted zones
758 stars 78 forks source link

Name.com #8

Open indianajson opened 3 years ago

indianajson commented 3 years ago

Service Name.com

Status Vulnerable w/ purchase

Nameservers

ns1***.name.com ns2***.name.com ns3***.name.com ns4***.name.com

Explanation

Based on this article in the support portal it is possible to add on external domains onto an existing hosting plan. This does require an active Name.com account and a hosting plan.

Additionally, while the naming scheme for their nameservers contains a number and three random letters (e.g. ns1fkl.name.com) this does not seem to affect responses. For example, econfigmrkt.com does not have ns3nrz.name.com as a nameserver, however dig econfigmrkt.com @ns3nrz.name.com will respond NOERROR.

Consequently, despite the paywall, Name.com is vulnerable to takeover.