81–90 of 189 posts
Earlier quoted context omitted.
Seems like you should also move off of Google Domains, unless you have some compelling reason to use them.
In the postmortem it states that they are moving to Cloudflare
GitBook CTO here: Our production domains (gitbook.com and gitbook.io) have been blocked and locked by our registrar (Google Domains). None of our infrastructure is impacted, all user content and databases are safe; our domains simply blocked by a heavy handed policy. As mentioned on Twitter, we are all hands working with Google to fix this issues ASAP. We'll then share an in-depth post-mortem https://twitter.com/GitB…
As a former domain registrar, I would get the authcode, unlock the domains, and transfer them away as soon as possible. It's been a while since I read the RAA ( https://www.icann.org/resources/pages/approved-with-specs-20... ), but it's rather extraordinary to put a domain on clientHold, which is what I assume they did to you, outside of non-payment or some kind of legal dispute.
...I don't host any DNS at Google, and if this is actually not spin, now I never would.
Not that I trusted Google before, but good lord, this is egregious.
GitBook CTO here: Our production domains (gitbook.com and gitbook.io) have been blocked and locked by our registrar (Google Domains). None of our infrastructure is impacted, all user content and databases are safe; our domains simply blocked by a heavy handed policy. As mentioned on Twitter, we are all hands working with Google to fix this issues ASAP. We'll then share an in-depth post-mortem https://twitter.com/GitB…
We've just published a postmortem: https://blog.gitbook.com/tech/post-mortems/06-20-gitbook-dom... let us know if you have any questions!
EDIT: I see you're moving to Cloudflare, but I wish you the best of luck
Earlier quoted context omitted.
Which registrar is recommended?
I like easydns - don't know who they resell thru, but it's awesome being able to call and get a real engineer on the phone and not a call center. I've been using them for years, and never had any technical issues...
The biggest hoster of phishing sites is Google.[1] Here's a list of major sites which have live entries in PhishTank.[2] Hosting phishing sites on Google Drive is very popular. Many of those are long gone, but PhishTank hasn't cleaned them out, so they're still listed. [1] http://www.sitetruth.com/reports/phishes.html [2] http://www.sitetruth.com/fcgi/ratingdetails.fcgi?details=tru...
To be fair, every platform which allows user-generated HTML pages suffers massively from phishing and most of them don't deal with it very well: Google, Microsoft, smaller players like Codebox and countless others. Then there's phishing on Dropbox, phishing on Google Forms, OneDrive, etc. Then you have phishing at all the various hosters like DigitalOcean, CloudFlare, etc. Even there you'll sometimes have IPs which h…
I find that a lot of phishing sites these days are hosted on legitimate sites that have been backdoored, but are continuing to operate as normal.
The phishing page is hidden away in the /.well-known/ directory or another similar one, so the website owner is non-the-wiser.
Earlier quoted context omitted.
In the postmortem it states that they are moving to Cloudflare
ahh yes, the more ethical choice to move to well known hosters of DDoS protection for white supremacist sites and literal nazis. Why not move to a company that is just a domain registrar.
If you were hosting phishing sites then I'm glad they did this. You should have better controls.
Automatically detecting phishing sites is surprisingly hard to do reliably. The only thing you can really do is rely on flagging and human verification. I've seen domains like google5[.]$tld which contained a fake Google Login form, up for close to an hour with zero detects in VirusTotal and no detection by Google Safe Browsing itself. If Google fails at detecting phishing against their own brand, what chances do sma…
It seems like a problem as hard as detecting spam.
Earlier quoted context omitted.
According to whois, google.com, amazon.com, github.com, microsoft.com, netflix.com, reddit.com, baidu.com, youtube.com, twitch.tv and wikipedia.org all use MarkMonitor [1] apple.com, twitter.com and ocado.com use CSC Corporate Domains [2] I have no idea what such services charge, but they're all "call for pricing" and none of those companies would blink at spending $10k/year on their domains. Not every well known bra…
Google.com doesn't even use Google Domains....that is telling right there.
Just out of curiosity- when Google is infamous for hard-to-reach human support, what in the Internet would make anyone interested to register their domain with them? Do they provide some sort of security or insurance that I am unaware of? All the popular dedicated domain registrars I have used so far have excellent human support. Godaddy, namecheap, namesilo to name a few. I don't know if big companies or corporate u…
Because I bought it 10 years ago, when Google was a very different organization, and moving would appear to risk some email downtime.
If you are using the registrar's built-in DNS hosting, move away from this first, which can also be done with no downtime.
Earlier quoted context omitted.
ahh yes, the more ethical choice to move to well known hosters of DDoS protection for white supremacist sites and literal nazis. Why not move to a company that is just a domain registrar.
Why not stick to the topic at hand, rather than trying to hijack the discussion?