{"id":119766,"date":"2024-09-12T03:43:01","date_gmt":"2024-09-12T01:43:01","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/popytka-polucheniya-tls-sertifikatov-dlya-chuzhih-domenov-mobi-ispolzuya-prosrochennyj-domen-s-whois-servisom"},"modified":"2024-09-12T03:43:01","modified_gmt":"2024-09-12T01:43:01","slug":"popytka-polucheniya-tls-sertifikatov-dlya-chuzhih-domenov-mobi-ispolzuya-prosrochennyj-domen-s-whois-servisom","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/popytka-polucheniya-tls-sertifikatov-dlya-chuzhih-domenov-mobi-ispolzuya-prosrochennyj-domen-s-whois-servisom","title":{"rendered":"P\u00ebrpjekja p\u00ebr t\u00eb marr\u00eb certifikata TLS p\u00ebr domenet e huaja mobi, duke p\u00ebrdorur nj\u00eb domen t\u00eb skaduar me sh\u00ebrbimin WHOIS.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Hulumtuesit nga kompania watchTowr Labs publikuan rezultatet e eksperimentit mbi kapjen e sh\u00ebrbimit WHOIS t\u00eb vjet\u00ebruar t\u00eb regjistruesit t\u00eb zon\u00ebs s\u00eb domenit \u00ab.MOBI\u00bb. Arsyetimi p\u00ebr k\u00ebt\u00eb hulumtim ishte se regjistruesi ndryshoi adres\u00ebn e sh\u00ebrbimit WHOIS, duke e zhvendosur at\u00eb nga domeni whois.dotmobiregistry.net n\u00eb hostin e ri whois.nic.mobi. N\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb, domeni dotmobiregistry.net nuk u p\u00ebrdor m\u00eb dhe n\u00eb dhjetor 2023 u lirua dhe u b\u00eb i disponuesh\u00ebm p\u00ebr regjistrim. <\/p>\n

Hulumtuesit shpenzuan 20 dollar\u00eb dhe blen\u00eb k\u00ebt\u00eb domen, pas s\u00eb cil\u00ebs n\u00eb serverin e tyre hodh\u00ebn n\u00eb veprim nj\u00eb sh\u00ebrbim t\u00eb tyre t\u00eb rrem\u00eb WHOIS whois.dotmobiregistry.net. U habit\u00ebn se shum\u00eb sisteme nuk kaluan n\u00eb hostin e ri whois.nic.mobi dhe vazhduan t\u00eb p\u00ebrdorin emrin e vjet\u00ebr. Nga 30 gushti deri m\u00eb 4 sembtori t\u00eb k\u00ebtij viti, u regjistruan 2.5 milion k\u00ebrkesa n\u00eb emrin e vjet\u00ebr, t\u00eb d\u00ebrguara nga m\u00eb shum\u00eb se 135 mij\u00eb sisteme unike. <\/p>\n

Nd\u00ebr d\u00ebrguesit e k\u00ebrkesave ishin postare hostingut<\/a> organizatat shtet\u00ebrore dhe ushtarake q\u00eb kan\u00eb verifikuar emrat e domen\u00ebve t\u00eb paraqitur n\u00eb email p\u00ebrmes WHOIS, t\u00eb specializuar n\u00eb sigurin\u00eb e kompanis\u00eb dhe platformave t\u00eb siguris\u00eb (VirusTotal, Group-IB), si dhe qendrat e besueshm\u00ebris\u00eb, sh\u00ebrbimet e verifikimit t\u00eb domen\u00ebve, sh\u00ebrbimet SEO dhe regjistruesit e domen\u00ebve (p.sh., domain.com, godaddy.com, who.is, whois.ru, smallseo.tools, seocheki.net, centralops.net, name.com, urlscan.io dhe webchart.org). <\/p>\n

Mund\u00ebsia p\u00ebr t\u00eb d\u00ebrguar t\u00eb dh\u00ebna t\u00eb \u00e7do lloji n\u00eb p\u00ebrgjigje t\u00eb k\u00ebrkes\u00ebs s\u00eb vjet\u00ebr t\u00eb sh\u00ebrbimit WHOIS t\u00eb zon\u00ebs s\u00eb domenit \u00ab.MOBI\u00bb u p\u00ebrdor p\u00ebr t\u00eb zhvilluar disa lloje sulmesh ndaj d\u00ebrguesve t\u00eb k\u00ebrkesave. Varianti i par\u00eb i sulmit bazohej n\u00eb supozimin se, n\u00ebse dikush vazhdon t\u00eb d\u00ebrgoj\u00eb k\u00ebrkesa n\u00eb nj\u00eb sh\u00ebrbim q\u00eb \u00ebsht\u00eb z\u00ebvend\u00ebsuar prej koh\u00ebsh, at\u00ebher\u00eb ka gjasa q\u00eb ta b\u00ebj\u00eb k\u00ebt\u00eb me mjete t\u00eb vjetruara q\u00eb p\u00ebrmbajn\u00eb dob\u00ebsi. <\/p>\n

P\u00ebr shembull, n\u00eb phpWHOIS n\u00eb vitin 2015 u zbulua nj\u00eb dob\u00ebsi CVE-2015-5243, e cila lejonte ekzekutimin e kodit nga sulmuesi gjat\u00eb analizimit t\u00eb t\u00eb dh\u00ebnave t\u00eb dizajnuara posa\u00e7\u00ebrisht, t\u00eb kthyera nga serveri WHOIS. Nj\u00eb shembull tjet\u00ebr \u00ebsht\u00eb dob\u00ebsia CVE-2021-32749 e zbuluar n\u00eb vitin 2021 n\u00eb paket\u00ebn Fail2Ban, e cila lejonte ekzekutimin e kodit t\u00eb jasht\u00ebm gjat\u00eb kthimit t\u00eb t\u00eb dh\u00ebnave t\u00eb pap\u00ebrshtatshme nga sh\u00ebrbimi WHOIS, i p\u00ebrdorur n\u00eb procesin e formimit t\u00eb paralajm\u00ebrimit p\u00ebr bllokim (Fail2Ban p\u00ebrcaktonte p\u00ebrmes WHOIS email-in e administratorit t\u00eb host-it dhe e tregonte at\u00eb gjat\u00eb ekzekutimit t\u00eb komand\u00ebs mail pa e mbrojtur si\u00e7 duhet karakteret speciale). <\/p>\n

Shtypi i dyt\u00eb \u00ebsht\u00eb p\u00ebrqendruar n\u00eb at\u00eb se disa qendra autorizimi ofrojn\u00eb mund\u00ebsin\u00eb e verifikimit t\u00eb pron\u00ebsis\u00eb s\u00eb domainit p\u00ebrmes email-it, q\u00eb \u00ebsht\u00eb e p\u00ebrcaktuar n\u00eb baz\u00ebn e regjistruesit t\u00eb domainit, e cila \u00ebsht\u00eb e qasshme p\u00ebrmes protokollit WHOIS. Doli q\u00eb disa qendra autorizimi q\u00eb p\u00ebrkrahin k\u00ebt\u00eb metod\u00eb verifikimi vazhdojn\u00eb t\u00eb p\u00ebrdorin serverin e vjet\u00ebr WHOIS p\u00ebr zon\u00ebn domene 'MOBI'. <\/p>\n

K\u00ebshtu, duke marr\u00eb kontroll mbi emrin whois.dotmobiregistry.net, sulmuesit mund t\u00eb kthejn\u00eb t\u00eb dh\u00ebnat e tyre, t\u00eb kryejn\u00eb konfirmimin dhe t\u00eb marrin certifikata TLS<\/a> p\u00ebr \u00e7do domain n\u00eb zon\u00ebn .MOBI. P\u00ebr shembull, gjat\u00eb eksperimentit, hulumtuesit k\u00ebrkuan nga regjistruesi GlobalSign nj\u00eb certifikat\u00eb TLS p\u00ebr domainin microsoft.mobi dhe email-i i kthyer nga sh\u00ebrbimi WHOIS i rrem\u00eb 'whois@watchTowr.com' u shfaq n\u00eb nd\u00ebrfaqe si i disponuesh\u00ebm p\u00ebr d\u00ebrgimin e kodit t\u00eb konfirmimit t\u00eb pron\u00ebsis\u00eb s\u00eb domainit.

\"P\u00ebrpjekja<\/center>
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 watchTowr Labs \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430 \u0441 \u0437\u0430\u0445\u0432\u0430\u0442\u043e\u043c \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0435\u0433\u043e WHOIS-\u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0439 \u0437\u043e\u043d\u044b «.MOBI». \u041f\u043e\u0432\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0443\u0436\u0438\u043b\u043e \u0442\u043e, \u0447\u0442\u043e \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 \u043f\u043e\u043c\u0435\u043d\u044f\u043b \u0430\u0434\u0440\u0435\u0441 WHOIS-\u0441\u0435\u0440\u0432\u0438\u0441\u0430, \u043f\u0435\u0440\u0435\u043c\u0435\u0441\u0442\u0438\u0432 \u0435\u0433\u043e \u0441 \u0434\u043e\u043c\u0435\u043d\u0430 whois.dotmobiregistry.net \u043d\u0430 \u043d\u043e\u0432\u044b\u0439 \u0445\u043e\u0441\u0442 whois.nic.mobi. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0434\u043e\u043c\u0435\u043d dotmobiregistry.net \u043f\u0435\u0440\u0435\u0441\u0442\u0430\u043b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0438 \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2023 \u0433\u043e\u0434\u0430 \u0431\u044b\u043b \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0451\u043d \u0438 \u0441\u0442\u0430\u043b \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0434\u043b\u044f \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u0442\u0440\u0430\u0442\u0438\u043b\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":119767,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-119766","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47P\u00ebrpjekja p\u00ebr t\u00eb marr\u00eb certifikata TLS p\u00ebr domenet e huaja mobi, duke p\u00ebrdorur nj\u00eb domen t\u00eb skaduar me sh\u00ebrbimin WHOIS | ProHoster","description":"Hulumtuesit nga kompania watchTowr Labs publikuan rezultatet e eksperimentit me kapjen e sh\u00ebrbimit t\u00eb vjet\u00ebruar WHOIS t\u00eb regjistruesit t\u00eb zon\u00ebs s\u00eb domenit \".MOBI\". Arsyetimi p\u00ebr k\u00ebt\u00eb studim ishte se regjistruesi ndryshoi adres\u00ebn e sh\u00ebrbimit WHOIS, duke e transferuar at\u00eb nga domeni whois.dotmobiregistry.net n\u00eb hostin e ri whois.nic.mobi. Gjat\u00eb k\u00ebsaj periudhe, domeni dotmobiregistry.net nuk u p\u00ebrdor m\u00eb dhe n\u00eb dhjetor 2023 u lirua dhe u b\u00eb i disponuesh\u00ebm p\u00ebr regjistrim. Hulumtuesit kaluan","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/popytka-polucheniya-tls-sertifikatov-dlya-chuzhih-domenov-mobi-ispolzuya-prosrochennyj-domen-s-whois-servisom","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u043e\u043f\u044b\u0442\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0434\u043b\u044f \u0447\u0443\u0436\u0438\u0445 \u0434\u043e\u043c\u0435\u043d\u043e\u0432 mobi, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0440\u043e\u0441\u0440\u043e\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u043c\u0435\u043d \u0441 WHOIS-\u0441\u0435\u0440\u0432\u0438\u0441\u043e\u043c | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 watchTowr Labs \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430 \u0441 \u0437\u0430\u0445\u0432\u0430\u0442\u043e\u043c \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0435\u0433\u043e WHOIS-\u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0439 \u0437\u043e\u043d\u044b ".MOBI". \u041f\u043e\u0432\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0443\u0436\u0438\u043b\u043e \u0442\u043e, \u0447\u0442\u043e \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 \u043f\u043e\u043c\u0435\u043d\u044f\u043b \u0430\u0434\u0440\u0435\u0441 WHOIS-\u0441\u0435\u0440\u0432\u0438\u0441\u0430, \u043f\u0435\u0440\u0435\u043c\u0435\u0441\u0442\u0438\u0432 \u0435\u0433\u043e \u0441 \u0434\u043e\u043c\u0435\u043d\u0430 whois.dotmobiregistry.net \u043d\u0430 \u043d\u043e\u0432\u044b\u0439 \u0445\u043e\u0441\u0442 whois.nic.mobi. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0434\u043e\u043c\u0435\u043d dotmobiregistry.net \u043f\u0435\u0440\u0435\u0441\u0442\u0430\u043b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0438 \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2023 \u0433\u043e\u0434\u0430 \u0431\u044b\u043b \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0451\u043d \u0438 \u0441\u0442\u0430\u043b \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0434\u043b\u044f \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u0442\u0440\u0430\u0442\u0438\u043b\u0438","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/popytka-polucheniya-tls-sertifikatov-dlya-chuzhih-domenov-mobi-ispolzuya-prosrochennyj-domen-s-whois-servisom","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-09-12T01:43:01+00:00","article:modified_time":"2024-09-12T01:43:01+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"119766","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 17:33:24","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 06:28:23","updated":"2026-02-09 17:33:24"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/119766","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=119766"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/119766\/revisions"}],"predecessor-version":[{"id":159214,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/119766\/revisions\/159214"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/119767"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=119766"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=119766"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=119766"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}