How to find registrador of DS record - dnssec

I bought a domain name magicescape.es a year ago. The issue is that this domain name has a DS record, but I didn't add it and can't delete or change. For .es domains, DNSSEC does not support. I spent a lot of time with the support of Godaddy and the last answer was "we can't help you with DS record because we don't see it. You should ask old website hosting to delete all related to this website content". But how it can affect the domain name that has different NS records?
I can see DS record here dns-analyzer.
Is there a way to find where from this particular DS record?

So, this battle ended.
I spent a lot of time with the support of Godaddy, Wix, DigitalOcean, Nominalia, and e.t.c.
As I wrote on my question, I found that the issue was with the DS record that I can't delete. In the end, I disconnected my domain name from any external services, configured Godaddy (this is my registrar), bought Godaddy hosting (just to set up all only in Godaddy environment). But still, I had the same issue. I called Godaddy and said that my domain name registered there, my hosting in the same place, but still, my web page (I created one) was not propagated after 5 days.
Godaddy just reset all domain settings and now it works!
Hope this description can help somebody to save a lot of time.

Related

Is there a way to create a custom download link for a google drive file with my own domain

Sorry for my poor knowledge about it. I would appreciate if anybody could explainme how can I create a custom download link for a google drive file. I got a domain in freenom.com and I want to change the download link of a google drive file to use my domain name in the url
What I’m try to do is avoid the final url docs.googleusercontent.com/docs/... using a custom link with my domain.
Is that possible?
I know it sound crazy but in my workplace they block docs.google url with a proxy filter and others cloud services like multcloud.com and koofr.eu too. Beside using proxy web or vpn is very suspect for they. 
So I need a way to download my files with my own url without lifting suspicions trace. 
I know is a nightmare but you never wish to live here. The only internet where I can download something is in my workplace.
Any solution with google colab may helpme too. Maybe create a temporal server via python in google colab and asign my domain name. But I just don’t know how to do it. With flask-ngrok I create one in google colab but the link I obtain is through de domain ngrok and Is blocked too.
The objetive is to create a custom download link to one file that doesn’t lifting suspicions trace and maybe reemplace in the future the file in google drive rename it so that keep the same path.
Any help will be appreciated.
Thanks for your time
Answer
I did it, finally I did it. I’m a beginner, so for me, founding a method to circumvent the stupid proxy filters of my workplace without leaving any suspects in order to download files from the internet is great!!!!!! wonderful!!!!!!. Also I got to say that in my country the price of the internet is a madness. Imagine that you would have to pay the equivalent of 250 dollars of your salary for only 2 gigabytes of data usage in your cellular. And also imagine that you would have to pay the equivalent of 375 dollars of your salary monthly for only 30 hours per month through adsl modem connection with the ridiculous speed of 1 Mbit/s. But only in my workplace the internet is free and fast (at least for me). Add to that situation the fact that they are watching you every move you do in your internet traffic.
As a communist country they control everything and in my workplace they have a man only for censure the internet blocking any suspicious page they found, and if they catching you using vpn or proxy web you receive a big problem. They block google drive, dropbox, and any other cloud storage services. Also they block any site you can use to download files if that site is not related to your work.
But hey, I finally found a way. First I got some free domains in freenom.com and I put them a name related with my work in order to not leave any suspicious trace in my web traffic. Then I got a free hosting service and associated each domains with a Wordpress site retouched in order to apparent something related with my work. Then I use my internet in my cellphone for download files from internet to my google drive account using google colab in order to store my files. After that I use google colab to upload my files from google drive to the ftp account of one of my Wordpress site created and then I create download links for all my file with my own domain name. And finally in my workplace I prepare a curl download script to download my files intermittently in order to not leave the appearance of downloading a big file traffic consuming. Finally I download the equivalent of 1 gb per day. Sad but true. I’m working now in a way to create a free ssl connection for my downloads with authentication system that won’t let the censor man to access to my links. Mabe with a Wordpress plugin

Best practice to store App Key in Laravel

I have been doing a lot of research on this and I can't seem to find a definitive answer. Obviously these days security is a big issue, hacks are going on all over the place of major companies that invest millions into security and they're still getting hacked.
I work on Laravel a lot and use shared hosting with Hostgator or some similar company of high report. Laravel comes with a built in function for encrypting database info and decrypting to the user when requested.
However, I have a question on how secure this ACTUALLY is. If someone gets into my cPanel, my app key which is used for encryption is right there in front of them. Granted, my cPanel password is the one that's auto-generated by Hostgator and it's complete jibberish with semicolons and alphanumeric strings all over, so it's not easy to guess.
But I'm trying to learn a little bit more about security. If my app key in my env file is locked securely behind my cPanel login, is Laravels built in "encrypt()" method "enough" to call an app "secure"? Is there other measures within Laravel or my host provider that could make it more secure than just tight passwords? Is there some sort of practice of referencing the app key through an external source that's not located in the cPanel area? So even if my cPanel got hacked, my app key wouldn't be in those files and get exposed?
I'm not a security expert, but there are a few points I can share from my experience in working at highly-secured companies.
First, Laravel itself is fine. You can generally trust open source software since it's transparent and security bugs get discovered and addressed early. So you don't need to improve Laravel, just use it as is, preferably an LTS version.
Then, CPanel is a liability. You should minimize weak points on your system, i.e. those that are externally accessible. Get a VPS or a private server and access it via an SSH, don't use tools like CPanel and PhpMyAdmin on it. The less software you have that talks to the outer world, the less vulnerable you are to bugs in that software.
In my current company the production server can only be accessed via SSH from a single IP address, the address of the dev server. So I log in to dev server first, and then log in from there to the prod. It denies all connections from all other IPs.
If you are limited to using CPanel or something similar, consider protecting the login page with HTTP Basic Auth, some hosting providers allow that.
You also want to keep your system and software up to date. Not too new either as that may have bugs that haven't been caught yet. Our devops prefer to have it a couple of minor versions behind, so that the community has time to test it out and get hacked for you.
That's all I know as a web-dev, sure enough there are special tools and ddos protection services but that's beyond a dev's concern imo. If you just follow these steps, you should be safe. Hope that helped a bit, cheers :)

How to access Cpanel on 1&1(IONOS) hosting? [closed]

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
This question does not appear to be about programming within the scope defined in the help center.
Closed last year.
Improve this question
Does anyone know how to access Cpanel on 1&1(IONOS). One of the biggest in the web hosting market but I didn't know it was one of the worst. Knowledge Base is empty. Searching on Google doesn't result in anything.
I am startled by the fact that I found NO INFORMATION online. Absolutely NO information on google. How could it be possible? No one has ever tried to ask this question before?!?!? BTW IONOS is the worst web host. If someone has to search for 20 mins to access even cpanel, then it's the worst web host.
IONOS Screenshot
Note the below is only available if you have the right build assigned to your account.
Server administration with Plesk is conveniently done right in your browser.
Since Plesk provides its own HTTPS service for this, a web server (e.g. Apache)
does not need to be running on the server.
Open your web browser and enter your domain name (or IP address)
followed by :8443 in the address bar.
Log in with the user name Admin and your initial password.
You can log in to IONOS and find your initial password in the Server Access Data section.
I am sure by now you managed to fix your problem. But I figured I must just post how I accessed it for other people. I am assuming that you wanted to remove some of the files on your website (i.e. if a WordPress plugin destroyed your site). The way I accessed my files is as follows: Firstly go to your Ionos dashboard. Then click on the contract you are using (i.e. WP Business). Thereafter go to hosting and click manage, then a page will open and click webspace. Once you click webspace you will be able to access all of your files.
I hope this helps someone out because truly getting information about Ionos seems like thesis research.
I nearly fell for their $6-for-the-first-year Business Plan account. Whups! Good thing I asked some questions first.
The sales person answered the chat after approx 20 mins, and was not customer friendly. When I enquired about included CPanel apps, I was abruptly told that CPanel is not included - you must purchase it separately. She did not tell me (this is what I mean by "abrupt"), but I read elsewhere, that they wrote their own "CPanel-like" administration tool - but from what I can tell it is significantly less capable. And as of this writing, I still do not know if they offer Node.js (which was something that I asked the sales rep but she did not answer).
I would be interested to see a screenshot of the IONOS CPanel replacement. I also would like to know what included apps they offer, such as phpBB, SimpleMachinesForum, Node.js, Python, Ruby - and how Git management/deployment works. As of this writing, and over 30 minutes on chat with them (including wait time), I have no idea.
Here is a fairly recently article from Dec 2021 that sheds more light:
https://websitesetup.org/hosting-reviews/ionos/
You can access your Cpanel using below URL,
http://IP:2082
Note: In IP you have to set your Cpanel IP.
above link redirect to login page, In login page you need to enter your username and password,
From the look of your screenshot it looks as if the package you have purchased is not one that contains a server. Here are two options for packages with servers.
Cloud
Dedicated
Ref
Go to Servers & Cloud -> Infrastructure -> Servers and select the server you want to access.
Then, go to either the Plesk or cPanel section, there you'll find user, password and host for your server.

Joomla 1.5 site keeps getting blocked by host

I have a Joomla 1.5.26 site which I have had since Aug 2012. It has been in a stable condition since Aug, with no changes to components etc. It is firewalled with RS Firewall and all the other security precautions have been taken.
During the past few weeks the site has started to be blocked by the hosting company that holds the site, who claim that there are too many active connections. I have hunted through the sites, disabled various components etc and am still getting the same problems.
Has anyone experienced any similar issues? I am thinking of moving the site to a more reputable host for Joomla sites to see if it is more robust elsehwere. I just can't undertand why this keeps happening. The Hosts, are placing the IP address of any machines we use to administer the site if the connections get too many, and then we are locked out for about fifteen minutes. As I said previously, nothing has changed on the site, and I cannot find any evidence of the files or database being hacked.
Any ideas?
Much appreciated
James
If your host is telling you that there have been too many connection then it will most likely mean 1 of the following 3:
You site has reached the maximum monthly bandwidth allowance
Your site has too much traffic for your current host and might need to be moved to a VPS server or something more powerful
You host is plain crap
Check to if you have reached your maximum monthly bandwidth allowance (if you have one) else I would probably recommend transferring to a different host, if you site isn't an extremely popular site, generating thousands of users a day.

Redirect apache icons folder

A client of mine is running an ecommerce store on godaddy shared hosting.
They are trying to pass pci compliance and the only issue is the default apache icons folder by allowing it to be indexed.
This folder is NOT in my web root. So I don't have access to it.
I've tried htaccess rewrites, but it's not working.
Anyone know of any other solutions?
I am sorry but Go Daddy shared hosting is not PCI Complaint. You can review the last part of this page to verify that: http://support.godaddy.com/help/article/4265/quick-shopping-cart-pci-compliance-faq?locale=en
turns out the scan is not required at level 4 with the amount of annual sales this client processes. So, we opted to leave it as-is.

Resources