#freenom — Public Fediverse posts

#Cloudflare loses 22% of its domains in #Freenom .tk shutdown https://www.netcraft.com/blog/cloudflare-loses-22-of-its-domains-in-freenom-tk-shutdown/

The Internet Last Week

* NANOG 90
https://www.nanog.org/events/nanog-90/
* Super Bowl LVII traffic trends
https://blog.cloudflare.com/super-bowl-lviii/
* Freenom exits the domain name business
https://www.freenom.com/en/freenom_pressstatement_02122024_v0100.pdf
* Mastodon joe job spam attack
https://mastodon.social/@Gargron/111953045633249137

#NANOG90 #SuperBowl #Freenom #Mastodon

#NomsDeDomaine
Exit, #Freenom, c'était parfois rigolo et parfois exaspérant. "Freenom and its related companies have also independently decided to exit the domain name business, including the operation of registries." https://www.freenom.com/en/freenom_pressstatement_02122024_v0100.pdf

#Verpasstodon

Zukunft vieler Domains ungewiss: Was der Ausstieg von Freenom zur Folge hat

Freenom zieht sich zurück. Der Schritt ist Folge eines Rechtsstreits mit Meta, in dem es um Cybergaunereien ging. Die Zukunft vieler Domains ist ungewiss.

https://www.heise.de/news/Zukunft-vieler-Domains-ungewiss-Was-der-Ausstieg-von-Freenom-zur-Folge-hat-9627218.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege

#Domain #Freenom #ICANN #OpenTLD

Zukunft vieler Domains ungewiss: Was der Ausstieg von #Freenom zur Folge hat | heise online https://www.heise.de/news/Zukunft-vieler-Domains-ungewiss-Was-der-Ausstieg-von-Freenom-zur-Folge-hat-9627218.html

Oooh, I know what is causing queues in sidekiq - many #freenom instances recently died :)

#mastoadmin

My #freenom domain stopped working two days ago. Every domains shop it’s shady and it’s hard to understand the cost after the 1st or 2nd year, I don’t know who to trust.
I just need to make my #homeassistant and overseer accessible, and this choice is very annoying. #selfhosted #linux

How a tiny Pacific Island became the global capital of cybercrime
https://www.technologyreview.com/2023/11/02/1082798/tiny-pacific-island-global-capital-cybercrime/

#Tokelau #DigitalColonialism #Freenom #Infosec

Freenom has been on Spamhaus researchers' radar for some time – that's why Spamhaus' Head of Data Carel Bitter was asked to contribute to an MIT Technology Review article by Jacob Judah on Freenom's .tk registry.

Read the article in full here 👇
https://www.technologyreview.com/2023/11/02/1082798/tiny-pacific-island-global-capital-cybercrime/

Get the latest insights into Freenom with Spamhaus Technology's Q3 Domain Reputation update:
https://info.spamhaus.com/domain-reputation-updates

#TLDs #Freenom #MITtechnologyreview

MIT Technology Review:

How a tiny Pacific Island became the global capital of cybercrime

I'm quoted in an article by Jacob Judah that reviews the scandalous history of the dot TK registry.

https://www.technologyreview.com/2023/11/02/1082798/tiny-pacific-island-global-capital-cybercrime/

#cybercrime #phishing #malware #freenom #dnsabuse

I'm pissed off that #Freenom died - and took all my funky domains with it.

here's my first post on #WordPress! i wrote up some words on why i migrated away from daniel.ga on mestizo.monster:

#freenom #gabon #ga #domains #dns #networking

http://mestizo.monster/2023/10/06/moving-on-from-freenom/

why am i still hanging on?

i’m just wasting time

forget my name

i’ll do the same

i’m moving on

– Forget My Name, Coyote Theory

tl;dr: Freenom was forced to hand over all of their .ga domains because the government of Gabon is reclaiming all those domains without a clear path forward for Freenom users. Freenom screwed a bunch of paying customers over, like me; I used to host my personal website on there. However, instead of transferring that site or re-registering it, now I’m here, on mestizo.monster. You should do your research when registering domains. Capitalism sucks (as usual). 🫤

Depending on when you’re reading this, I host/used to host a personal website for myself at daniel.ga/llegos. The reason for creating this was twofold:

1. It was a cool domain hack to show off my neat name my mom and dad gave me: Daniel Gallegos.
2. The .ga domain was free! As in beer. (At the time.)

FreeNom, a domain name registrar, started offering free .ga domain name registration from June 12-14, 2013. This was a part of their free offerings from domains including .tk, .cf, and .ml. I didn’t hear about them until 2016. Stumbling across their page made me excited as a broke teenager. I didn’t know any better; I was getting a free domain name! There shouldn’t be any downsides, right?

the immediate downsides of registering “free” domain names

You can go… wild with domains when they’re free. You start blasting out registrations. I say this from experience. Another .ga domain name I registered name was a food-related noun you’re familiar with. The almighty taco. 🌮 As someone who likes managing multiple websites that have no purpose except to be funny domain names, I immediately registered taco.ga. It was free, right? My friend at the time told me that it reminded them of the Final Fantasy spell name system. I thought hosting an image upload site or a link shortening site would be helpful and amusing. Get two birds stoned at once, or however you say that phrase. An old friend of mine gave me access to his cPanel and let me tinker with setting up web hosting space and different projects that could run on his host, for freeeee! I started uploading my screenshots from ShareX to a folder that pointed to taco.ga, thinking:

> “This is a permanent solution to my image hosting needs and I won’t ever need to use Imgur ever again!”

And, for a few weeks, I was right! I even submitted a Wikipedia edit using a hyperlink to an image that proved that the subject of the page wanted a page moved. That’s how you know I trusted it. I was proud of myself. I had created my own space for my own images, and nobody could stop me.

Well… nobody… except the domain registrar. But they wouldn’t do that to me, right?

how a “free” domain registrar stopped me from owning my domain

There were a few T&Cs that I didn’t read closely when I signed up to Freenom’s services. They were pretty reasonable, don’t host anything illegal along with other terms I glazed over. For my uses, this had to be perfectly fine. However, there was a clause that allowed them to reclaim any “unused” domain names if there wasn’t (what they deemed to be) sufficient… “content” on the front page of the site. That means if I didn’t have an index.html saying “hello world” or anything on there, they had the legal right to take my domain name away from me. Mind you, I wasn’t hosting illegal images on there or anything. All I was uploading were random screenshots from my computing life, which was pretty boring. I hadn’t put a “frontend” on my page yet, if that’s what they wanted. It, like all the things I put online, was a constant work in progress.

I don’t remember the full death of taco.ga well; I can’t give you a proper ‘postmortem’. All I remember is that I was upset about it. They may have sent me an email “telling me” that they were taking it away, but I never saw it hit my inbox. It was a short, proper noun domain that I had started to depend on and they took it away from me. However, I now noticed that when I searched for taco.ga on their “free” registration site, it suddenly had a value attached to it instead of being “free”: ten bucks! Alright, it wasn’t that expensive, but I had no money. I was a young teenager living in the middle of South America, at the time. What money? I was paywalled out of my own project. What gives?

how “free” domains don’t turn out to be free

I’m sure you can see a strategy here. Freenom’s plan was the following:

• bait a customer into a “free” domain with vague Terms of Service that nobody will read; you can snatch it back if needed
• snatch the domain back from the customer for arbitrary reasons that were in your Terms of Service
• make the customer pay if they want their domain back since they’ve been using it

And the worst part? It worked. I was scared enough with the loss of taco.ga that I went out and purchased daniel.ga for two years after asking my mom to please help me with my fledgling “technology professional career” (or whatever you want to call my current employment situation). After getting the green light from the woman with the cash, I used my mom’s debit card to purchase and solidify my “professional presence” online. You know, like an adult. 😎

Now that I had my domain name and solidified my presence online, there wouldn’t be any more issues, right?

how “free” domain names are free for… everyone

Related side tangent: I block ads, and so should you. There’s a laundry list of reasons why I do, but I personally do it to keep myself and anyone on my network safe from malware online. I won’t go into too much detail here, but trust me: you should get uBlock Origin set up in your browser of choice. Do it for me. 🙏

I have a Raspberry Pi 3B that I use as an ad-blocking DNS server. I had it running Pi-Hole with an Unbound recursive DNS server in the past, but now I’ve swapped out Pi-Hole with AdGuard Home. It had a nicer user interface and has a lot of blocklists built in, which was an issue I was facing with Pi-Hole – constantly having to maintain my internet blocklists. I could add my own and disable lists I wanted within their UI with ease… I was more than happy to switch. Moreover, the software allowed me to enable categories for multiple languages. Since I frequent a lot of Spanish-language sites as a native Spanish speaker, I enable these when I get the chance.

I run an Uptime Kuma instance here locally and on a VPS I own to monitor the uptime of Fediverse instances I like and make sure that my private, personal, and professional projects are all online. After making the switch to AdGuard Home, however, I noticed that daniel.ga was suddenly “offline” for me locally. This confused me; the DNS was parked on a large provider (CloudFlare) at the time. They should be able to serve my site efficiently without any issues, right?

how people use and abuse “free” domains

I hopped onto my phone’s network to try and diagnose the problem. I was able to pull up my website, no issues, but I wasn’t running an ad blocker locally on my phone. (I should set that up…) When I dig’d into the situation on my terminal on my ad-blocking home network, however, I noticed that I was blocking my own website somewhere: the DNS was redirecting to the localhost 127.0.0.1 blackhole. What gives?

As fate would have it… one of AdGuard Home’s Filter Spanish language filter lists blocks a lot of .ga, and other associated FreeNom addresses. They’re not alone. Many Fediverse instances cite .ga, .tk, .cf, .ml domain name instances as “block on site”. They’re “unstable” to host on and are commonly used for spammy ActivityPub posts and contribute to negative Fediverse health. But why these domains in particular? Shouldn’t Freenom be doing something?! This is against their Terms of Service, right?

For the answer to this, we must (begrudgingly) look to Big Tech; in particular, FaceVerseMetaBook. KrebsonSecurity reported in 2022 that they filed a lawsuit last year against Freenom, claiming that Freenom is not doing their due diligence in responding to nearly 100k requests regarding “unlawful activity including cybersquatting and phishing”. Because we keep ad blockers on to protect ourselves from attacks such as these, this is a clear reason to add the entirety of the .ga domain name to a blocklist: you can’t trust the domain name registrar, Freenom, to do their job! After FaceMetaBookVerse sent their lawyers to Freenom, Freenom’s engineers finally woke up and started to process the mountain of requests they had in their inbox. However, the damage had already been done. The domains were poisoned.

Big Tech isn’t alone in being annoyed by Freenom’s lack of action. All the countries that the domains belong to are upset that their domain names are on a bunch of blocklists. That’s right, those domains (.ga, .tk, .cf, .ml) have countries that they originate from!

• .ga – Gabon, a country in West Central Africa
• .tk – Tokelau, a nation off the coast of New Zealand
• .cf – the Central African Republic, a country in Central Africa
• .ml – Mali, a country in West Africa

Freenom took advantage of the weak IT infrastructure in these countries and entered a partnership with them with the belief that “providing free domain names to [the] internet population will greatly improve the usage and knowledge of the IT industry in the country”, the Dot ML Registry claimed in 2013 {pdf}. I… don’t think they achieved that goal. A press release from ANINF, a national agency responsible for digital infrastructure within the Gabonese government, states that Freenom has failed to provide the internet community with services that properly represent the interests of the Gabon IT industry and the industry at large. As a paying customer (read: part of the industry at large), I am also not satisfied. Because of Freenom’s laziness in keeping up their “free”, predatory service, multiple countries are now suffering from their domains being abused for phishing and hosting malware.

lessons learned

and so what we have learned applies to our lives today

and taco has a lot to say

in this post!

– tacotales, i guess?

What can we learn from this? Multiple things:

• If you’re getting something for free, there’s a catch.

I’ve been maintaining other, paid .net, .cafe, .party, and other domains for multiple years and haven’t run into any issues with ad blocklists. Freenom was taking advantage of users by providing a “free” service that preyed on them reclaiming domains and making you pay for them if you wanted them back. I register my domains with Porkbun and manage my DNS with Bunny, now, and I’m much happier and have more peace of mind. (Not sponsored, I just like their services.)

• Don’t depend on country-based domains unless you live in them.

I’m not from Gabon. Don’t plan on visiting anytime soon, but I bet it’s lovely! (I have my own South American countries to visit.) However, I wish the people of Gabon the best success in reclaiming their domains. The people of Gabon, Mali, the CAR, and the nation of Tokelau should be using their own domain names instead of random spammers on the internet. Domain hacks are cool, but think about the people you may be affecting with your domain hack. Someone named Daniel in Gabon probably wants this domain name, and they should get it instead of me.

• Check blocklists to see if the domain name you’re registering is blocked somewhere, just in case!

Searching through AdGuard’s Filter list is a good place to start. There’s a ton of blocklists out there for Pi-Hole, AdGuard Home, and many others. I’m sure you can find them. You’re resourceful.

• Check how much your domain is going to cost you yearly!

I don’t pay more for $30 yearly for a domain. This is going to change in the future thanks to inflation, but you should expect, right now, to pay about $15-20 for a good domain name each year. As a web developer, I have fun creating domain names and goofy websites to go along with them. It’s a hobby, but it can get expensive quick! Remember that this is a commitment you’re going to sign up to pay each year. Think it through!

Personally, after thinking it through myself, I came to this conclusion: instead of renewing daniel.ga, I bought a new domain name that feels more authentic to me and doesn’t depend on people knowing my name. You’re on it right now! I’m also taking this opportunity to test out writing posts through WordPress after being a static site nerd for a decade. It’s a bold strategy for taco, let’s see how it plays out… 🤔

in conclusion

daniel.ga/llegos is dead. Freenom killed it. 💀

Long live mestizo.monster. 😈

https://mestizo.monster/2023/10/06/moving-on-from-freenom/

#Ga #danielGa #dns #domain #domainNames #freenom #gabon #mestizoMonster #networking #personalWebsites #tacoGa #Technology #website #websites

Our quarterly #phishing activity report for May - July 2023 is now available.

High and lowlights:

After a drop in phishing attacks reported in the February - April 2023 period, phishing attacks increased 21% during the May - July 2023 period.

As #Freenom fades into the sunset, other ccTLDs also saw drops in phishing domains reported.

Where did the phishers go? To the #newTLDs. And to subdomain service providers.

For more insights, read our Phishing Trends page https://www.cybercrimeinfocenter.org/phishing-trends-may-july-2023

Quando il #GarantePrivacy non ti caca di striscio perché #Freenom non ha intenzione di cancellare il mio account.

Se non erro questo meme l'ho rubato a @nicfab.

I'm quite annoyed that #freenom has died and taken down all my .ml domains.

Does anyone know of a #registrar which is actually selling .ml domains? All the ones I've found list them, but don't actually allow a purchase once you go through checkout.

Bah! Now that #Freenom have died, all the above #Punycode domains have been taken down.

Is there anyone still offering free domain names on obscure TLDs?

Gabon government takes GA TLD from Freenom

From the announcement,

Gabon's national infrastructure agency estimates that there are currently over 7M delegated domain names in .GA.

BUT.. several million domain names will be deleted as the
previous operator has not provided the data that concern them.

Most of these are likely spam or phishing domains.

One down. Four to go:-)

https://www.afnic.fr/wp-media/uploads/2023/05/ga-domain-names-soon-to-return-to-Gabonese-management-1.pdf

#freenom #dnsabuse #phishing

In the Sewer of the Internet article, Freenom found Joost Zuurbier admits that

"the domain trade has attracted an excessive number of malicious parties and was his worst business model ever"

Reminds me of a scene from the movie, Casablanca, where Captain Renault cries out

"I'm shocked! Shocked to find that gambling is going on in here."

On queue, a croupier approaches him with a pile of cash and says, "Your winnings, sir."

Crying worst business model ever as you stroll to the bank for years? Can't wait til you try to convince a judge.

#phishing #freenom

What better title could you compose about Freenom commercialized ccTLDs than.

The sewer of the internet runs through Amsterdam and Tokelau. 'Domains that are given away for free attract misery'

(Note: mentions @briankrebs article and an EC report that quotes stats from our Interisle 2021 phishing study)

https://www.nrc.nl/nieuws/2023/05/26/het-riool-van-het-internet-loopt-via-amsterdam-en-tokelau-domeinen-die-gratis-weggegeven-worden-trekken-ellende-aan-a4165670

Lawsuits against gTLDs and registrars may be a hot topic at the upcoming ICANN meeting.

#phishing #dnsabuse #freenom

Phishing Domains Tanked After Meta Sued Freenom

https://krebsonsecurity.com/2023/05/phishing-domains-tanked-after-meta-sued-freenom/

#InterisleConsultingGroup #AWPGEcrimeExchange #ALittleSunshine #DavePiscitello #Namecheap #OpenPhish #phishtank #Mastodon #spamhaus #Freenom #Meta

Phishing Domains Tanked After Meta Sued Freenom

https://krebsonsecurity.com/2023/05/phishing-domains-tanked-after-meta-sued-freenom/

#InterisleConsultingGroup #AWPGEcrimeExchange #ALittleSunshine #DavePiscitello #Namecheap #OpenPhish #phishtank #Mastodon #spamhaus #Freenom #Meta

Phishing Domains Tanked After Meta Sued Freenom https://krebsonsecurity.com/2023/05/phishing-domains-tanked-after-meta-sued-freenom/ #InterisleConsultingGroup #AWPGEcrimeExchange #ALittleSunshine #DavePiscitello #Namecheap #OpenPhish #phishtank #Mastodon #spamhaus #Freenom #Meta

Phishing Domains Tanked After Meta Sued Freenom https://krebsonsecurity.com/2023/05/phishing-domains-tanked-after-meta-sued-freenom/ #InterisleConsultingGroup #AWPGEcrimeExchange #ALittleSunshine #DavePiscitello #Namecheap #OpenPhish #phishtank #Mastodon #spamhaus #Freenom #Meta

Phishing Domains Tanked After Meta Sued Freenom https://krebsonsecurity.com/2023/05/phishing-domains-tanked-after-meta-sued-freenom/ #InterisleConsultingGroup #AWPGEcrimeExchange #ALittleSunshine #DavePiscitello #Namecheap #OpenPhish #phishtank #Mastodon #spamhaus #Freenom #Meta

Phishing Domains Tanked After Meta Sued Freenom https://krebsonsecurity.com/2023/05/phishing-domains-tanked-after-meta-sued-freenom/ #InterisleConsultingGroup #AWPGEcrimeExchange #ALittleSunshine #DavePiscitello #Namecheap #OpenPhish #phishtank #Mastodon #spamhaus #Freenom #Meta

Phishing Domains Tanked After Meta Sued Freenom https://krebsonsecurity.com/2023/05/phishing-domains-tanked-after-meta-sued-freenom/ #InterisleConsultingGroup #AWPGEcrimeExchange #ALittleSunshine #DavePiscitello #Namecheap #OpenPhish #phishtank #Mastodon #spamhaus #Freenom #Meta

I just discovered what happened with the whole #Freenom shenanigan: they got sued by #Facebook / #Meta due to #phishing. That's why they stopped working.

https://krebsonsecurity.com/2023/03/sued-by-meta-freenom-halts-domain-registrations/

#freenom and #tk is dead I think, has been 3 months and they still didn't fix the registrations..

Sued by Meta, Freenom Halts Domain Registrations https://krebsonsecurity.com/2023/03/sued-by-meta-freenom-halts-domain-registrations/ #Ne'er-Do-WellNews #ALittleSunshine #WebFraud2.0 #Instagram #Facebook #WhatsApp #Freenom #ICANN #Meta

Sued by Meta, Freenom Halts Domain Registrations

https://krebsonsecurity.com/2023/03/sued-by-meta-freenom-halts-domain-registrations/

#ALittleSunshine #NeerDoWellNews #WebFraud20 #Instagram #Facebook #WhatsApp #Freenom #ICANN #Meta

@byron_miller I would use a Cloudflare tunnel using an addon in homeassistant called #CloudFlared very easy to setup and you can use a free domain name from #freenom at https://www.freenom.com