domain-stealing

#domain-stealing

@vpsing_de: Reality domain stealing, from low to high: steal from big companies, steal from neighbors, steal from yourself. How to steal your neighbor's domain? 1. Open http://bgp.he.net, the page will show your network segment, e.g., 1.1.1.1/21. Figure 1 2. Enter your network segment in the search bar, press Enter, then click the Certs menu on the displayed page to see all domains associated with your IP segment. Figure 2 3. With so many domains, which one to choose? (1) Prefer .com and .org, as owners of these domains are generally stable. (2) How to confirm if a domain can be used as a reality disguise domain? 4. Select (copy) a domain, open https://ssllabs.com/ssltest/index.html…, enter the domain, press Enter, Figure 3 5. After testing, scroll down to Configuration; if both TLS 1.3 and TLS 1.2 show yes, the domain is usable. Figure 4 6. Finally, open this website in a browser. If it's a text-only site, it's suitable for small traffic. If it's a media site, it's suitable for large traffic.

X AI KOLs Timeline ↗ · 3d ago Cached

This article explains how to use the Hurricane Electric BGP tool to find domains bound to neighbor IP segments, and filter those supporting TLS 1.3 and 1.2 for use as reality disguise domains, adapting traffic type based on site content (text-only or media).

0 favorites 0 likes

domain-stealing

Submit Feedback