54
Lots of dead Lemmy/Kbin domains have CNAME records pointing to the same domain parking company
(lemmy.pierre-couy.fr)
Thanks for sharing your research
this post was submitted on 26 Jul 2024
54 points (100.0% liked)
Fediverse
757 readers
3 users here now
A community dedicated to fediverse news and discussion.
Fediverse is a portmanteau of "federation" and "universe".
Getting started on Fediverse;
- What is the fediverse?
- Fediverse Platforms
- How to run your own community
founded 5 years ago
MODERATORS
Out of interest, is pathfinder.social among those snatched up by these?
It does not seem to be the case. Was it the full domain for this instance ?
Yes, that's the full domain. It used to host communities such as !pf2general@pathfinder.social. Unfortunately it's been dead for 9–10 months now.
The fact that it has not been bought as soon as the domain expired makes me believe this instance went down before the trend started
I'm actually not really clear on what the status of that instance is. Like, for me, when I browse to https://pathfinder.social, I actually see what looks like an empty Lemmy instance running 0.18.2. Some communities show the same for me, while others show a generic error message. So I don't know whether it's running in some failed state due to caching, or deregistered, or what.
That's really really weird, I cannot resolve the domain to an IP, even after trying a bunch of different DNS servers. If you're on linux, can you run nslookup pathfinder.social and paste the output here ?
If you’re on linux
I'm not, but I do have WSL installed. It returned "Can't find pathfinder.social: No answer"
Out of interest, I tried the same command in Microsoft PowerShell, I get:
Server: dns9.quad9.net
Address: 9.9.9.9
Name: pathfinder.social
That's the full output. No actual list of returned addresses.
I'm guessing my system just has pathfinder.social cached.
Yeah, this probably has to do with the cache. You can try opening dev tools (F12 in most browsers), go to the network tab, and browse to pathfinder.social. You should see all requests going out, including "fake requests" to content that you already have locally cached
Oh neat, I'd never thought of that before. Woulda been handy back last time I was working on a PWA!
200 OK (from service worker)
So yeah, getting it from the cache.
There is even a "Ignore cache" box in the devtools network tab
According to this service, that domain never had any subdomains, so looks like there's just nothing there at the moment.
Not sure how reliable it is, but it did correctly identify all of my own subdomains for a website that no one ever goes to.
These services usually use either or both of passive DNS replication (running public recursive DNS resolvers and logging lookup that returns a record) and certificate transparency logs (where certificate authorities publish the domain names for which they issue certificates). A lot of my subdomains are missing from these services
Ahh I guess they probably got my subdomains from let's encrypt then, used them for pretty much all my websites.
Edit: Just checked and yup, all my old subdomains are there from let's encrypt.
What I did is use a wildcard subdomain and certificate. This way, only pierre-couy.fr and *.pierre-couy.fr ever show up in the transparency logs. Since I'm using pi-hole with carefully chosen upstream DNS servers, passive DNS replication services do not seem to pick up my subdomains (but even subdomains I share with some relatives who probably use their ISP's default DNS do not show up)
This obviously only works if all your subdomains go to the same IP. I've achieved something similar to cloudflare tunnels using a combination of nginx and wireguard on a cheap VPS (I want to write a tutorial about this when I find some time). One side benefit of this setup is that I usually don't need to fiddle with my DNS zone to set up a new subdomains : all I need to do is add a new nginx config file with a server section.
Some scanners will still try to brute-force subdomains. I simply block any IP that hits my VPS with a Host header containing a subdomain I did not configure