Name.com
indianajson opened this issue · comments
Service
Name.com
Status
Vulnerable w/ purchase
Nameservers
ns1***.name.com
ns2***.name.com
ns3***.name.com
ns4***.name.com
Explanation
Based on this article in the support portal it is possible to add on external domains onto an existing hosting plan. This does require an active Name.com account and a hosting plan.
Additionally, while the naming scheme for their nameservers contains a number and three random letters (e.g. ns1fkl.name.com) this does not seem to affect responses. For example, econfigmrkt.com
does not have ns3nrz.name.com
as a nameserver, however dig econfigmrkt.com @ns3nrz.name.com
will respond NOERROR
.
Consequently, despite the paywall, Name.com is vulnerable to takeover.