2

I have a business site (example.com) hosted at NameCheap. The hosting plan allows up to 4 addon domains. I have two more personal sites (a.com, b.com) on another hosting. Obviously for reducing the costs, I am tempted to host my personal sites as addon domains on the example.com hosting.

My question is how likely it would be for some power user, (through Whios, or advanced and elaborate techniques which I am not aware of) to connect the dots and figure out that the owner of site a.com is same as owner of the example.com?

(by the way, both domains are registered with whiosprotect guards, so registrar info are not accessible from there).

  • So you rolled back my changes from my subdomain to addon domain... Please explain the difference, I'm new to addon domain. – Martijn Dec 18 '14 at 16:05
  • addon domain is a domain name you already paid a registrar and registers ( eg. domain.com), then you want to co-host it with your other sites. subdomain is just a fancy way to access folders on your site. that is domain.com/folder1 can be accessed as folder1.domain.com. Normally you don't pay for creating subdomains. – cybergeek654 Dec 18 '14 at 16:24
  • So you want to domains to the same hosting? That is do-able via DNS, but you're gonna have to contact your current hoster about that – Martijn Dec 18 '14 at 17:06
  • Martijn - I know. The question is not If it is possible or not, or how to do it. The question is if someone could tell if the two domains (main domain and addon domain) both are hosted in the same hosting, and hence are related. – cybergeek654 Dec 19 '14 at 12:09
  • Yes, reverse DNS can do that easily – Martijn Dec 19 '14 at 14:18
3

There are likely several attributes that your sites share in common that could be used to link them.

  1. IP Address -- they will be hosted on the same server. Sites like this one list the host names that point to a particular server. There may also be many sites not owned by you on the same server which may disguise it somewhat.
  2. You use the same templates or technology. Sites like this one track which technologies your site uses. Such a tool could be used to correlate ownership of your sites.
  3. Google Adsense code -- If you have advertising on both sites you may use the same publisher ID in the source code of each because ad networks such as Google Adsense prohibit multiple accounts per person
  4. Google Analytics code -- Similarly if you use Analytics, you could use the same code on both sites. At least with Google analytics you have the option of tracking the sites under different accounts or codes.
  5. Google site verification -- If you verify both sites with Google Webmaster Tools, you will have to use the same code for both sites. You could put the code into a specially named HTML file rather than use a meta tag or a DNS entry which would make it very hard for any user to discover.
| improve this answer | |
1

It is possible that reverse DNS would reveal something, but that depends on how Namecheap manages their shared hosting accounts. This could be determined by evaluating two domains on one account.

However, if someone is going through the trouble to evaluate the records of two sites, then there is a good chance they are already on to you. Seeing that both domains are hosted and registered with the same company or just in the same way (both registered through Namecheap, both use privacy, both on Namecheap shared hosting), may be all the confirmation they are looking for.

| improve this answer | |
1

This is from a free site I use a lot Pentest-Tools I felt it would help you more than just doing a WOT search or the whois/alexia/dns lookups. This should be able to answer your question bye running a quick test to see if it shows up as you or not. -Hillary Marek

'Find Subdomains' allows you to discover subdomains of your target domain and increase your attack surface.

Finding subdomains is useful in a penetration test because they point to different applications and indicate different external network ranges used by the target company. For instance, x.company.com points to IP 1.1.1.1 and y.company.com points to IP 2.2.2.2. Now you know two different ip ranges possibly owned by your target and you can extend the attack surface.

Furthermore, subdomains sometimes host 'non-public' applications (e.g. test, development, restricted) which are usually less secure than the public applications so they can be the primary attack targets.

Parameters

Domain name: is the target domain (ex. oracle.com, yahoo.com, etc) Include subdomain details: this option instructs the tool to do DNS resolution for each subdomain discovered and whois queries in order to determine the network owners of the ip addresses

To use this free tool and check what shows up when you search your name you can click the following link.

How it works

This tool uses multiple techniques to find subdomains such as: DNS zone transfer, DNS enumeration based on a specially chosen wordlist and public search engines queries.

I hope this was helpful. Remember that namecheap offers the added package of privacy protection and I am sure many other companies like hostgator and godaddy do as well. Good luck.

| improve this answer | |
  • sorry it would not let me use a hyperlink just search the name of the test on google and it should pop right up. Cheers – Maliceon Dec 21 '14 at 9:04

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.