{"id":119766,"date":"2024-09-12T03:43:01","date_gmt":"2024-09-12T01:43:01","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/popytka-polucheniya-tls-sertifikatov-dlya-chuzhih-domenov-mobi-ispolzuya-prosrochennyj-domen-s-whois-servisom"},"modified":"2024-09-12T03:43:01","modified_gmt":"2024-09-12T01:43:01","slug":"popytka-polucheniya-tls-sertifikatov-dlya-chuzhih-domenov-mobi-ispolzuya-prosrochennyj-domen-s-whois-servisom","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/popytka-polucheniya-tls-sertifikatov-dlya-chuzhih-domenov-mobi-ispolzuya-prosrochennyj-domen-s-whois-servisom","title":{"rendered":"P\u00ebrpjekje p\u00ebr t\u00eb marr\u00eb certifikata TLS p\u00ebr domenet e huaja mobi, duke p\u00ebrdorur nj\u00eb domen t\u00eb skaduar me sh\u00ebrbimin WHOIS.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

K\u00ebrkuesit nga kompania watchTowr Labs publikuan rezultatet e nj\u00eb eksperimenti me kapjen e sh\u00ebrbimit t\u00eb vjet\u00ebr WHOIS t\u00eb regjistruesit t\u00eb zon\u00ebs s\u00eb domain-it \u00ab.MOBI\u00bb. Arsyeja p\u00ebr k\u00ebt\u00eb studim ishte se regjistruesi ndryshoi adres\u00ebn e sh\u00ebrbimit WHOIS, duke e zhvendosur at\u00eb nga domeni whois.dotmobiregistry.net n\u00eb hostin e ri whois.nic.mobi. Gjat\u00eb k\u00ebtij \u043f\u0440\u043e\u0446\u0435\u0441\u0441i, domeni dotmobiregistry.net kishte pushuar s\u00eb p\u00ebrdoruri dhe n\u00eb dhjetor 2023 u lirua dhe u b\u00eb i disponuesh\u00ebm p\u00ebr regjistrim. <\/p>\n

K\u00ebrkuesit shpenzuan 20 dollar\u00eb dhe blen\u00eb k\u00ebt\u00eb domen, pas s\u00eb cil\u00ebs nis\u00ebn nj\u00eb sh\u00ebrbim t\u00eb tyre fiktiv WHOIS whois.dotmobiregistry.net n\u00eb serverin e tyre. Habia ishte se shum\u00eb sisteme nuk kaluan n\u00eb hostin e ri whois.nic.mobi dhe vazhduan t\u00eb p\u00ebrdorin emrin e vjet\u00ebr. Nga 30 gushti deri m\u00eb 4 shtator t\u00eb k\u00ebtij viti jan\u00eb regjistruar 2.5 milion k\u00ebrkesa p\u00ebr emrin e vjet\u00ebr, t\u00eb d\u00ebrguara nga m\u00eb shum\u00eb se 135 mij\u00eb sisteme unike. <\/p>\n

Mes d\u00ebrguesve t\u00eb k\u00ebrkesave ishin postat server\u00ebt<\/a> e organizatave shtet\u00ebrore dhe ushtarake, q\u00eb verifikonin domenet q\u00eb figuronin n\u00eb email p\u00ebrmes WHOIS, si dhe kompanit\u00eb dhe platform\u00ebn e siguris\u00eb (VirusTotal, Group-IB), si dhe q\u00ebndrat e verifikimit, sh\u00ebrbimet e kontrollit t\u00eb domenit, sh\u00ebrbimet SEO dhe regjistruesit e domenit (p.sh., domain.com, godaddy.com, who.is, whois.ru, smallseo.tools, seocheki.net, centralops.net, name.com, urlscan.io dhe webchart.org). <\/p>\n

Mund\u00ebsia p\u00ebr t\u00eb d\u00ebrguar t\u00eb dh\u00ebna t\u00eb \u00e7do lloji si p\u00ebrgjigje ndaj k\u00ebrkesave t\u00eb d\u00ebrguara n\u00eb sh\u00ebrbimin e vjet\u00ebr WHOIS t\u00eb zon\u00ebs s\u00eb domain-it \u00ab.MOBI\u00bb u p\u00ebrdor p\u00ebr t\u00eb zhvilluar disa lloje sulmesh mbi d\u00ebrguesit e k\u00ebrkesave. Variant i par\u00eb i sulmit u bazua n\u00eb supozimin se n\u00ebse dikush vazhdon t\u00eb d\u00ebrgoj\u00eb k\u00ebrkesa n\u00eb nj\u00eb sh\u00ebrbim t\u00eb z\u00ebvend\u00ebsuar prej koh\u00ebsh, ka t\u00eb ngjar\u00eb q\u00eb ai ta b\u00ebj\u00eb k\u00ebt\u00eb duke p\u00ebrdorur mjete t\u00eb vjetra q\u00eb p\u00ebrmbajn\u00eb dob\u00ebsi. <\/p>\n

P\u00ebr shembull, n\u00eb phpWHOIS n\u00eb vitin 2015 u zbulua nj\u00eb dob\u00ebsi CVE-2015-5243, q\u00eb lejonte ekzekutimin e kodit nga sulmuesi gjat\u00eb analiz\u00ebs s\u00eb t\u00eb dh\u00ebnave t\u00eb formatuara ve\u00e7an\u00ebrisht, t\u00eb kthyera nga serveri WHOIS. Nj\u00eb shembull tjet\u00ebr \u00ebsht\u00eb dob\u00ebsia e zbulimit n\u00eb vitin 2021 CVE-2021-32749 n\u00eb paket\u00ebn Fail2Ban, q\u00eb lejonte ekzekutimin e kodit t\u00eb jasht\u00ebm me kthimin e t\u00eb dh\u00ebnave t\u00eb pasakta nga sh\u00ebrbimi WHOIS, i p\u00ebrdorur n\u00eb procesin e formimit t\u00eb paralajm\u00ebrimeve p\u00ebr bllokim (Fail2Ban p\u00ebrcaktonte p\u00ebrmes WHOIS email-in e administratorit t\u00eb hostit dhe e tregonte at\u00eb gjat\u00eb ekzekutimit t\u00eb komand\u00ebs mail pa e sh\u00ebnuar si\u00e7 duhet karakteret speciale). <\/p>\n

Sulmi i dyt\u00eb bazohet n\u00eb faktin se disa qendra t\u00eb akreditimit ofrojn\u00eb mund\u00ebsin\u00eb e verifikimit t\u00eb pron\u00ebsis\u00eb s\u00eb domain-it p\u00ebrmes email-it t\u00eb caktuar n\u00eb baz\u00ebn e t\u00eb dh\u00ebnave t\u00eb regjistruesit t\u00eb domain-it, e cila \u00ebsht\u00eb e disponueshme p\u00ebrmes protokollit WHOIS. Doli se disa qendra akreditimi q\u00eb mb\u00ebshtesin k\u00ebt\u00eb metod\u00eb verifikimi vazhdojn\u00eb t\u00eb p\u00ebrdorin sh\u00ebrbimin e vjet\u00ebr WHOIS p\u00ebr zon\u00ebn \u00ab.MOBI\u00bb. <\/p>\n

K\u00ebshtu, duke marr\u00eb kontroll mbi emrin whois.dotmobiregistry.net, sulmuesit mund t\u00eb kthejn\u00eb t\u00eb dh\u00ebnat e tyre, t\u00eb kryejn\u00eb verifikimin dhe t\u00eb marrin TLS-certifikat<\/a> p\u00ebr \u00e7do domain n\u00eb zon\u00ebn .MOBI. P\u00ebr shembull, gjat\u00eb eksperimentit, k\u00ebrkuesit k\u00ebrkuan nga regjistruesi GlobalSign nj\u00eb certifikat\u00eb TLS p\u00ebr domenin microsoft.mobi dhe email-i fiktiv i kthyer nga sh\u00ebrbimi WHOIS \u2018whois@watchTowr.com\u2019 u shfaq n\u00eb nd\u00ebrfaqe si i disponuesh\u00ebm p\u00ebr d\u00ebrgimin e kodit t\u00eb konfirmimit p\u00ebr pron\u00ebsin\u00eb e domain-it.

\"P\u00ebrpjekje<\/center>
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 watchTowr Labs \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430 \u0441 \u0437\u0430\u0445\u0432\u0430\u0442\u043e\u043c \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0435\u0433\u043e WHOIS-\u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0439 \u0437\u043e\u043d\u044b «.MOBI». \u041f\u043e\u0432\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0443\u0436\u0438\u043b\u043e \u0442\u043e, \u0447\u0442\u043e \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 \u043f\u043e\u043c\u0435\u043d\u044f\u043b \u0430\u0434\u0440\u0435\u0441 WHOIS-\u0441\u0435\u0440\u0432\u0438\u0441\u0430, \u043f\u0435\u0440\u0435\u043c\u0435\u0441\u0442\u0438\u0432 \u0435\u0433\u043e \u0441 \u0434\u043e\u043c\u0435\u043d\u0430 whois.dotmobiregistry.net \u043d\u0430 \u043d\u043e\u0432\u044b\u0439 \u0445\u043e\u0441\u0442 whois.nic.mobi. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0434\u043e\u043c\u0435\u043d dotmobiregistry.net \u043f\u0435\u0440\u0435\u0441\u0442\u0430\u043b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0438 \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2023 \u0433\u043e\u0434\u0430 \u0431\u044b\u043b \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0451\u043d \u0438 \u0441\u0442\u0430\u043b \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0434\u043b\u044f \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u0442\u0440\u0430\u0442\u0438\u043b\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":119767,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-119766","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47P\u00ebrpjekja p\u00ebr t\u00eb marr\u00eb TLS-certifikata p\u00ebr domainet e huaja mobi, duke p\u00ebrdorur nj\u00eb domain t\u00eb skaduar me sh\u00ebrbimin WHOIS | ProHoster","description":"Hulumtuesit nga kompania watchTowr Labs publikuan rezultatet e nj\u00eb eksperimenti p\u00ebr kapjen e sh\u00ebrbimit t\u00eb vjetruar WHOIS t\u00eb regjistruesit t\u00eb zon\u00ebs s\u00eb domainit \".MOBI\".","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/popytka-polucheniya-tls-sertifikatov-dlya-chuzhih-domenov-mobi-ispolzuya-prosrochennyj-domen-s-whois-servisom","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u043e\u043f\u044b\u0442\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0434\u043b\u044f \u0447\u0443\u0436\u0438\u0445 \u0434\u043e\u043c\u0435\u043d\u043e\u0432 mobi, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0440\u043e\u0441\u0440\u043e\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u043c\u0435\u043d \u0441 WHOIS-\u0441\u0435\u0440\u0432\u0438\u0441\u043e\u043c | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 watchTowr Labs \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430 \u0441 \u0437\u0430\u0445\u0432\u0430\u0442\u043e\u043c \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0435\u0433\u043e WHOIS-\u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0439 \u0437\u043e\u043d\u044b ".MOBI".","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/popytka-polucheniya-tls-sertifikatov-dlya-chuzhih-domenov-mobi-ispolzuya-prosrochennyj-domen-s-whois-servisom","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-09-12T01:43:01+00:00","article:modified_time":"2024-09-12T01:43:01+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"119766","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 17:33:24","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 06:28:23","updated":"2026-02-09 17:33:24","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/119766","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=119766"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/119766\/revisions"}],"predecessor-version":[{"id":159214,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/119766\/revisions\/159214"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/119767"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=119766"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=119766"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=119766"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}