Challenge Description
What a fun and catchy domain name, right? A friend of mine has been using it for testing purpose. like forwarding it to other sites. Based on that, we need to check whether there are any other ways he might have misused the domain. Can you help me identify any potential issues beyond what’s immediately visible when clicking on the domain, So you might spot a flag then?
Challenge Solution
When we visit the domain name mentioned in the question title, we’re automatically redirected to this video https://www.youtube.com/watch?v=pNBx9dFIYsk
Based on the description of the question, it appears that his friend has misused the domain. To uncover any potential problems that aren't immediately visible when accessing the domain, I’d like to investigate further by reviewing WHOIS
information and DNS records
. These details may reveal additional concerns related to the domain’s configuration.
I'm planning to use https://dnschecker.org/all-dns-records-of-domain.php to view every type of DNS record and their corresponding values. This will give us a complete overview of the domain’s configuration and help identify any hidden or misconfiguration entries.
Upon checking the TXT
record value, we can see that we have got the flag NCSC{D0m41n_h1d33n_Fl@g_N3w_iD3a_S47_TXT_C@n_B3_us3d}
Challenge Idea
The player receives a domain name referenced in the question title. When opened, it redirects to a YouTube video. This behavior suggests that the domain may have issues related to redirection. To investigate further, we examined its DNS records, and got the flag from the TXT DNS
records.