Live data from Hacker News

Is it an accident? No, it's a wildcard subdomain

ebay.c.uk

11–20 of 49 posts

Re: Is it an accident? No, it's a wildcard subdomain

#12
post #2

I think this is a good demo to share with family and am glad this organization has c.uk. Another more general example to share with family is: http://www2.scotiaonline.scotiabank.com.online.authenticatio... These are both cases where the subdomain can trick people. The .c.uk one is a bit more dangerous as they claim a lot of people end up landing on those pages. I had a quick look through some other second level doma…

What I find hard to believe and just realized was that this domain was registered on 10-Jun-2014.

Edit: People were first able to register .uk domains last year, and if the .co.uk domain already exists then you must own it in order to register the .uk domain.

Re: Is it an accident? No, it's a wildcard subdomain

#13
post #8

How is a wildcard subdomain configured?

Have the glue record for a/your domain (e.g. c.uk) point to your own nameserver. Configure the nameserver to respond to any request for an A or AAAA record under that domain with the target IP address. Make the HTTP server listening on that IP address answer regardless of the Host header.

Re: Is it an accident? No, it's a wildcard subdomain

#15
post #8

How is a wildcard subdomain configured?

It depends on your DNS provider as to if they support it or not. Often, they will not and you'll simply have to run your own dns nameserver (bind) with a wildcard config, such as http://community.aegirproject.org/dnswildcard ... Googling around will find you many bind configurations and discussions of this feature.

Re: Is it an accident? No, it's a wildcard subdomain

#17
post #7

Earlier quoted context omitted.

Why is that interesting? c.uk is a registered domain, the WHOIS for subdomains correctly states that it can't be registered.

> Why is that interesting? Because I found it interesting.

No, he means what do you find unusual about it. It seems like an ordinary name to me.

Is it that it seems too easy to typo?

Re: Is it an accident? No, it's a wildcard subdomain

#18
post #10
post #3

Interesting that they would allow such an odd domain to be registered in the first place. It seems like a big security hole.

You're missing something here. The UK is a country that allows second-level domains e.g., co.uk, gov.uk, org.uk as well as just domains ending in .uk. This organizations owns c.uk (so the who-is you should lookup is just c.uk. What I find hard to believe is that ti looks like it was registered on: 10-Jun-2014!?

[deleted]

Re: Is it an accident? No, it's a wildcard subdomain

#19
post #12
post #2

I think this is a good demo to share with family and am glad this organization has c.uk. Another more general example to share with family is: http://www2.scotiaonline.scotiabank.com.online.authenticatio... These are both cases where the subdomain can trick people. The .c.uk one is a bit more dangerous as they claim a lot of people end up landing on those pages. I had a quick look through some other second level doma…

What I find hard to believe and just realized was that this domain was registered on 10-Jun-2014. Edit: People were first able to register .uk domains last year, and if the .co.uk domain already exists then you must own it in order to register the .uk domain.

Direct registrations under .uk (and not just .co.uk, .org.uk etc) were only opened last year.

Re: Is it an accident? No, it's a wildcard subdomain

#20
post #19
post #12

Earlier quoted context omitted.

What I find hard to believe and just realized was that this domain was registered on 10-Jun-2014. Edit: People were first able to register .uk domains last year, and if the .co.uk domain already exists then you must own it in order to register the .uk domain.

Direct registrations under .uk (and not just .co.uk, .org.uk etc) were only opened last year.

That explains it; I was completely baffled. I wonder how much of a bidding war there was for this domain.
Post reply on HN