publicsuffix / list

The Public Suffix List
https://publicsuffix.org/
Mozilla Public License 2.0
2k stars 1.2k forks source link

remove `devcdnaccesso.com` #2065

Closed wdhdev closed 1 month ago

wdhdev commented 1 month ago

Reasons for removal:

Original PR was #1248, which was opened by @jsearles-accesso.

groundcat commented 1 month ago

WHOIS

2019-05-01T12:34:23Z < PR creation date, which indicates that this domain is possibly still under control of original requester if it hadn't been transferred.

Please read the original WHOIS records below:

   Domain Name: DEVCDNACCESSO.COM
   Registry Domain ID: 2386345254_DOMAIN_COM-VRSN
   Registrar WHOIS Server: whois.godaddy.com
   Registrar URL: http://www.godaddy.com
   Updated Date: 2023-05-02T15:20:01Z
   Creation Date: 2019-05-01T12:34:23Z
   Registry Expiry Date: 2025-05-01T12:34:23Z
   Registrar: GoDaddy.com, LLC
   Registrar IANA ID: 146
   Registrar Abuse Contact Email: abuse@godaddy.com
   Registrar Abuse Contact Phone: 480-624-2505
   Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
   Domain Status: clientRenewProhibited https://icann.org/epp#clientRenewProhibited
   Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
   Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
   Name Server: NS33.DOMAINCONTROL.COM
   Name Server: NS34.DOMAINCONTROL.COM
   DNSSEC: unsigned
   URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of whois database: 2024-07-25T03:16:19Z <<<

Sources: whois utility generated at 2024-07-24 23:16:46

Organization Website and Nature Check

https://accesso.com/ still accessible

image

Sources:

_psl TXT Record

Responses from multiple DNS servers for the _psl TXT record of the domain:

Response from 8.8.8.8: empty

Response from 1.1.1.1: empty

Response from 208.67.222.222: empty

Sources: dig command using DNS servers: Google (8.8.8.8), Cloudflare (1.1.1.1), OpenDNS (208.67.222.222)

Root-level Domain Usage Scan

As a potential indicator of domain usage, we scan the following records:

NS records (devcdnaccesso.com) returns ns33.domaincontrol.com. ns34.domaincontrol.com.

Additionally, we scan the following records for possible website usage at the root level:

A record (devcdnaccesso.com) returns 3.33.130.190 15.197.148.33

A record (www.devcdnaccesso.com) returns devcdnaccesso.com. 3.33.130.190 15.197.148.33

MX records (devcdnaccesso.com) returns ``

Sources: dig command for A, NS, and MX records

Search Engine Checks

For possible website usage, we queried multiple different search engines:

image image image image image

Sources:

Subdomain Discovery

For potential usage of subdomains that are not discovered by the search engines, we used the following tools and here are the obtained observations:

image

image

Sources:

crt.sh Certificate Transparency Logs

For potential website usage of subdomains that are not discovered by the search engines, we checked the Certificate Transparency Logs and here are the obtained observations:

None is valid today.

image

Sources:

VirusTotal Check

To check for possible security issues, we used VirusTotal and here are the obtained observations:

OK

image

Sources:

wdhdev commented 1 month ago

@simon-friedberger Resolved merge conflict

dnsguru commented 1 month ago

This is really frustrating

That IOS change that #1248 had Facebook and Apple both pointing people at the PSL for solutions and all the various other PRs triggered by techbros was straight up a huge waste of the resources here of volunteers