Name.com
indianajson opened this issue · 0 comments
indianajson commented
Service Name.com
Status Vulnerable w/ purchase
Nameservers
ns1***.name.com
ns2***.name.com
ns3***.name.com
ns4***.name.com
Explanation
Based on this article in the support portal it is possible to add on external domains onto an existing hosting plan. This does require an active Name.com account and a hosting plan.
Additionally, while the naming scheme for their nameservers contains a number and three random letters (e.g. ns1fkl.name.com) this does not seem to affect responses. For example, econfigmrkt.com does not have ns3nrz.name.com as a nameserver, however dig econfigmrkt.com @ns3nrz.name.com will respond NOERROR.
Consequently, despite the paywall, Name.com is vulnerable to takeover.