+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Can you fake a whois nameserver? (/showthread.php?tid=5206000)
Can you fake a whois nameserver? - Implorjin - Mar 17, 2016
I have a feeling this site is using a fake name server on their whois to trick me. Is this even possible? And if so, is there way to get the real name server?
* - Frosteh - Mar 17, 2016
Query the whois records to find the "real" nameserver. DNS is hierarchical so if you just resolve a request for any of their domains it will resolve correctly. The only way it could resolve otherwise is if they have a private DNS/Nameserver which is not listed publicly and they also configure their own devices to visit that DNS server instead of a public one.
* - Jаson - Mar 17, 2016
yes, you can hide real names from whois.
* - Über code - Mar 17, 2016
The answer is yes someone can fake a name server from which the site can provide their own page to popular sites and steal your credentials.