Results 1 to 2 of 2
  1. #1
    Registered User
    Join Date
    Jun 2017
    Posts
    1

    How to prevent unauthorized domain forwarding?

    Hi All,

    I am not sure if this is the right place to ask this question, but we are facing a peculiar issue.

    An unknown domain http://unauthdomain.cf is forwarding (with masking) to our domain http://ourdomain.com.
    The data, files, content are being served from our server even at folder levels. Any changes made to our pages is reflecting on their pages as well.
    However, the URLs are showing as http://unauthdomain.cf/folder1 instead of http://ourdomain.com/folder1.

    We detected this issue when we got an alert in our Google Webmaster tools. We reported this to Cloudfront / Hosting provider and the same was removed after a few hours. However, now we have found 3 other unauthorized domains with the same forwarding/linking.

    How do we stop these domains (even in future) from spoofing our site? Can this be handled at domain DNS configuration level? If not, what changes should we do to server (We use Nginx) level to prevent such issues?

  2. #2
    Registered User
    Join Date
    Feb 2014
    Location
    delhi
    Posts
    459
    Domain forwarding with masking is done by iframe,you can resolve this with X-FRAME-OPTIONS and Javascript,I suggest to use second option since not all browser respect x-frame-options.Google "how to prevent my site to be loaded inside iframe"..there are many writen JS codes you can use right now.

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

  Find Web Hosting      
  Shared Web Hosting UNIX & Linux Web Hosting Windows Web Hosting Adult Web Hosting
  ASP ASP.NET Web Hosting Reseller Web Hosting VPS Web Hosting Managed Web Hosting
  Cloud Web Hosting Dedicated Server E-commerce Web Hosting Cheap Web Hosting


Premium Partners:


Visit forums.thewebhostbiz.com: to discuss the web hosting business, buy and sell websites and domain names, and discuss current web hosting tools and software.