What is Domain Hijacking and how to Prevent it?

Saturday, May 23rd, 2009

 

Losing a domain is an incredibly frustrating experience for domain owners. This article will help explain how this happens, and how you can keep it from happening to you.

There are three main ways that people lose domain names:

  1. An owner allows the domain registration to lapse.
  2. A domain is stolen after a hijacker gains access to the registry record.
  3. An owner does not keep up-to-date contact information in their record and their record is deleted after the registrar concludes that contact with the owner is not possible.

The good news is that there are steps you can take to keep this from happening to you. The most basic way to avoid losing your domain is to keep track of expiration dates and maintain your contact information. One smart way to do this is to consolidate your domains at one high-quality registrar. This allows you to manage a domain portfolio more easily and comprehensively. But remember, your domain can be deleted if your contact data is out of date. Registrars now have to verify ownership annually.

 

A second and related tip is to make sure that you are listed as the Administrative Contact. If it is a corporate domain name, then make sure the business owner or a senior executive is the Administrative Contact; this person is authorized to modify the website hosting, the records and he or she can change the domain’s ownership.

 

Next, it is important to use a paid email account for your Administrative Contact email address whenever possible. Free email addresses can be suspended or deleted. If this happens, you will not receive notices from your registrar for renewal, and someone else could register that email address and then use it to request a domain transfer.

 

You can also place a registrar lock on your domain. This can help prevent it from being transferred, modified or deleted by a third party. It is also important that you make sure your registrar gives you the ability to unlock your domain at any time without having to call or email them (at DS-Hosting Solutions you can lock/unlock your domain at any time). Otherwise, when you sell a domain name you will have to wait for someone at the registrar to process your request, and then the transfer will take more time and most importantly, it will take more time for you to receive your payment.

 

It is also important for you to be an educated email user. Never respond to emails that ask you to click on a link or respond without investigating the source and fully understanding the e-mail’s contents. Be especially careful with domain-related emails that look official but are from an unknown source. Contact your registrar to find out what is happening and if the email is from them. Domain hijackers have been known to send out mass transfer requests hoping that a small number of people will actually accept the transfer request. Do not let yourself fall prey to this type of scam.

 

Another step you can take to make sure you do not lose your domain is putting your registrar on your email list of "approved senders". This will ensure that you receive emails from your registrar, including the all important registry renewal notices.

 

Finally, on a related note, it is a good idea to renew your domain early and for long periods of time.

Protect your domains by following these guidelines:

  1. Keep track of expiration dates and keep your contact information up-to date. (Consider domain consolidation.)
  2. Make sure you are listed as the Administrative Contact so that only you can modify the domain record or change ownership.
  3. Try to avoid using free-email addresses.
  4. Make use of registrar locks over which you have control.
  5. Be an educated email user: investigate email senders and email contents.
  6. Place your registrar on your "approved sender" email list and have emails from them go straight to your inbox.
  7. Renew your domain early and for long periods of time.

How to login webmail directly without acessing cPanel?

Monday, May 18th, 2009

 

How to login directly using “webmail.domain.com” in to Squirrelmail, Horde or RoundCube of any account?

 

First you need to create a subdomain that you want to redirect to your preferred Webmail client [Squirrelmail / Horde / RoundCube].

 

Following are the steps to create subdomain.

  1. Login in to your cPanel interface.
  2. Select the Subdomain option, and create the subdomain. (For eg: webmail.domain.com)
  3. Once it has been created, go to the File Manager option of the cPanel.
  4. Change path to “public_html” by selecting the folder image beside the text “public_html”
  5. Now change the path to folder that was create by your subdomain. (as per our example it would be the “webmail” folder.
  6. Once inside this directory [webmail], you will see “.htaccess” file, if it’s not there then you need to create it manually.
    • If it is not there then create new using below steps: (if it already exists proceed to step 10)
  7. Create it [.htaccess] by selecting the “Create New File” option.
  8. A menu appears in the top right corner of the File Manager interface. Choose “Text Document” and name it “.htaccess[without quotes]
  9. Now refresh File Manager and you will then see your new file [.htaccess] in the listing of that directory.
  10. Click on the text title for the .htaccess file on the left side of the screen and a menu appears in the top right of the screen.
  11. Choose the “Edit File” option, a new window opens.
  12. Add the following lines:

- If You Want To Redirect “webmail.domain.com” to the Squirrel Mail Client: -

 

RewriteEngine on

RewriteCond %{HTTP_HOST} ^webmail.domain.com$ [OR]

RewriteCond %{HTTP_HOST} ^www.webmail.domain.com$

RewriteRule ^(.*)$ http://domain.com:2095/3rdparty/squirrelmail/index.php$1 [R=301,L]

 

- If You Want To Redirect “webmail.domain.com” to the Horde Webmail Client: -

 

RewriteEngine on

RewriteCond %{HTTP_HOST} ^webmail.domain.com$ [OR]

RewriteCond %{HTTP_HOST} ^www.webmail.domain.com$

RewriteRule ^(.*)$ http://domain.com:2095/horde/$1 [R=301,L]

 

- If You Want To Redirect “webmail.domain.com” to the RoundCube Webmail Client: -

 

RewriteEngine on

RewriteCond %{HTTP_HOST} ^webmail.domain.com$ [OR]

RewriteCond %{HTTP_HOST} ^www.webmail.domain.com$

RewriteRule ^(.*)$ http://domain.com:2095/3rdparty/roundcube/$1 [R=301,L]

 

NOTE: replace “domain.com” above with your actual domain name.

 

Enjoy Direct Webmail Client Login. :)

.tel Control Panel Tutorial

Saturday, May 16th, 2009

 

This video shows how to populate your .tel with contact data using the .tel Control Panel.

Get the Flash Player to see the wordTube Media Player.

.htaccess – Change your default directory page.

Friday, May 15th, 2009

 

Some of you may be wondering, just what in the world is a DirectoryIndex? Well, this is a command which allows you to specify a file that is to be loaded as your default page whenever a directory or url request comes in, that does not specify a specific page. Tired of having yoursite.com/index.html come up when you go to yoursite.com? Want to change it to be yoursite.com/ILikePizzaSteve.html that comes up instead? No problem!

 

DirectoryIndex filename.html

 

This would cause filename.html to be treated as your default page, or default directory page. You can also append other filenames to it. You may want to have certain directories use a script as a default page. That’s no problem too!

 

DirectoryIndex filename.html index.cgi index.pl default.htm

 

Placing the above command in your htaccess file will cause this to happen: When a user types in yoursite.com, your site will look for filename.html in your root directory (or any directory if you specify this in the global htaccess), and if it finds it, it will load that page as the default page. If it does not find filename.html, it will then look for index.cgi; if it finds that one, it will load it, if not, it will look for index.pl and the whole process repeats until it finds a file it can use. Basically, the list of files is read from left to right.

 

One thing you have to keep in mind, sub-folders will adopt the .htaccess settings specified within there main folder.