<div dir="ltr"><div dir="ltr"><br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Sat, Feb 19, 2022 at 7:04 PM Shlomo Solomon <<a href="mailto:shlomo.solomon@gmail.com">shlomo.solomon@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Yehuda Deutsch - if you mean whois, I also get a normal response:<br>
Domain Name: <a href="http://LXER.COM" rel="noreferrer" target="_blank">LXER.COM</a><br>
Registry Domain ID: 109446700_DOMAIN_COM-VRSN<br>
Registrar WHOIS Server: <a href="http://whois.enom.com" rel="noreferrer" target="_blank">whois.enom.com</a><br>
Registrar URL: <a href="http://www.enomdomains.com" rel="noreferrer" target="_blank">http://www.enomdomains.com</a><br>
Updated Date: 2022-01-06T10:42:51Z<br>
Creation Date: 2004-01-06T22:15:59Z<br>
Registry Expiry Date: 2023-01-06T22:15:59Z<br>
Registrar: eNom, LLC<br>
<br>
<br>
<br>
But the site is not there. As Geoff Shang wrote, the site looks<br>
like a landing site of some kind.<br>
<br></blockquote><div><br></div><div>I didn't know the site, but it doesn't look like a parking page for upselling an expired domain.</div><div><br></div><div>Let's try to be more constructive in debugging this. First - are you getting to the site as published by the site's owner.</div><div><br></div><div>First, you learn from WHOIS (and also from '<span style="font-family:monospace"><span style="color:rgb(0,0,0);background-color:rgb(255,255,255)">dig @<a href="http://a.gtld-servers.net">a.gtld-servers.net</a> ns <a href="http://lxer.com">lxer.com</a></span></span>') that the nameservers for this site are: <a href="http://ns1.wmkt.net">ns1.wmkt.net</a> [66.232.124.26] <a href="http://ns2.wmkt.net">ns2.wmkt.net</a> [66.232.124.28] <a href="http://ns3.wmkt.net">ns3.wmkt.net</a> [66.232.124.30]</div><div><br></div><div>Then you follow by 'dig <a class="gmail_plusreply" id="plusReplyChip-1">@ns1.wmkt.net lxer.com'</a>. You should be getting:</div><div><br></div><div><span style="font-family:monospace"><span style="color:rgb(0,0,0);background-color:rgb(255,255,255)">$ dig @<a href="http://ns1.wmkt.net">ns1.wmkt.net</a> <a href="http://lxer.com">lxer.com</a>
</span><br>
<br>; <<>> DiG 9.16.25 <<>> @<a href="http://ns1.wmkt.net">ns1.wmkt.net</a> <a href="http://lxer.com">lxer.com</a>
<br>; (1 server found)
<br>;; global options: +cmd
<br>;; Got answer:
<br>;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 1540
<br>;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 3, ADDITIONAL: 4
<br>;; WARNING: recursion requested but not available
<br>
<br>;; OPT PSEUDOSECTION:
<br>; EDNS: version: 0, flags:; udp: 4096
<br>;; QUESTION SECTION:
<br>;<a href="http://lxer.com">lxer.com</a>. IN A
<br>
<br>;; ANSWER SECTION:
<br><b><a href="http://lxer.com">lxer.com</a>. 3600 IN A 66.232.124.26
<br>
</b><br>;; AUTHORITY SECTION:
<br><a href="http://lxer.com">lxer.com</a>. 3600 IN NS <a href="http://ns3.wmkt.net">ns3.wmkt.net</a>.
<br><a href="http://lxer.com">lxer.com</a>. 3600 IN NS <a href="http://ns1.wmkt.net">ns1.wmkt.net</a>.
<br><a href="http://lxer.com">lxer.com</a>. 3600 IN NS <a href="http://ns2.wmkt.net">ns2.wmkt.net</a>.
<br>
<br>;; ADDITIONAL SECTION:
<br><a href="http://ns1.wmkt.net">ns1.wmkt.net</a>. 86400 IN A 66.232.124.26
<br><a href="http://ns2.wmkt.net">ns2.wmkt.net</a>. 86400 IN A 66.232.124.28
<br><a href="http://ns3.wmkt.net">ns3.wmkt.net</a>. 86400 IN A 66.232.124.30
<br>
<br>;; Query time: 183 msec
<br>;; SERVER: 66.232.124.26#53(66.232.124.26)
<br>;; WHEN: Sat Feb 19 21:13:12 IST 2022
<br>;; MSG SIZE rcvd: 163<br>
<br></span></div><div><span style="font-family:arial,sans-serif">Now, run just 'dig <a href="http://lxer.com">lxer.com</a>' - do you get the same IP? If not, something/someone is messing with your DNS. In that case make sure that the SERVER line indeed has the correct IP address I mentioned above (that I got from the glue records provided for <a href="http://wmkt.net">wmkt.net</a> by <a href="http://a.gtld-servers.net">a.gtld-servers.net</a>)<br></span></div><div><span style="font-family:arial,sans-serif"><br></span></div><div><span style="font-family:arial,sans-serif">If you do get the same IP, someone can still be messing with your traffic, because that site is HTTP and not HTTPS, so really no one can guarantee you're in fact talking with 66.232.124.26...</span></div><div><span style="font-family:arial,sans-serif"><br></span></div><div><span style="font-family:arial,sans-serif">HTH,</span></div><div><span style="font-family:arial,sans-serif"><br></span></div><div><span style="font-family:monospace"><span style="font-family:arial,sans-serif">-- Shimi</span><br></span></div></div></div>