Feedback Can site verification be faked?

Discussion in 'Support & Feedback' started by DomainMagnate, Dec 29, 2011.

  1. #1
    hey all, I have suspicions about a certain site sale, so I was wondering is there some way to fake the DP site verification process, or if someone has his site verified on the DP sales thread that means that he owns it 100%, or at least has access to ftp there?
     
    Solved! View solution.
    DomainMagnate, Dec 29, 2011 IP
  2. laxman363

    laxman363 Active Member

    Messages:
    2,173
    Likes Received:
    81
    Best Answers:
    0
    Trophy Points:
    90
    #2
    Do you know he process.
     
    laxman363, Dec 29, 2011 IP
  3. #3
    When a website is verified it means the user has access to the FTP. Doesn't mean they own the domain...However, how would they get the ftp details to upload the file to confirm?
     
    NetBastard, Dec 29, 2011 IP
  4. digitalpoint

    digitalpoint Overlord of no one Staff

    Messages:
    38,334
    Likes Received:
    2,613
    Best Answers:
    462
    Trophy Points:
    710
    Digital Goods:
    29
    #4
    Anything can be faked given enough resources. If someone hacked their hosting account or domain account, it could be faked. Best thing to do is always use an escrow service.
     
    digitalpoint, Dec 29, 2011 IP
  5. DomainMagnate

    DomainMagnate Illustrious Member

    Messages:
    10,932
    Likes Received:
    1,022
    Best Answers:
    0
    Trophy Points:
    455
    #5
    vaguely, never sold a site here, bought lots of them though. I usually use escrow so it's not a problem, but for smaller sites for under $500, it can be an issue. Thanks all for the help!

    Shawn, have you considered also setting up a domain verification process? Sending an email to the whois address for confirmation - seems like it won't be very hard to implement and can help a lot with filtering many of the scammers here.
     
    DomainMagnate, Dec 30, 2011 IP
    robjones likes this.
  6. digitalpoint

    digitalpoint Overlord of no one Staff

    Messages:
    38,334
    Likes Received:
    2,613
    Best Answers:
    462
    Trophy Points:
    710
    Digital Goods:
    29
    #6
    There already is a domain ownership verification process.
     
    digitalpoint, Dec 30, 2011 IP
  7. DomainMagnate

    DomainMagnate Illustrious Member

    Messages:
    10,932
    Likes Received:
    1,022
    Best Answers:
    0
    Trophy Points:
    455
    #7
    ok I'm confused now, doesn't the site verification process only require uploading a certain file to ftp?
     
    DomainMagnate, Jan 2, 2012 IP
  8. digitalpoint

    digitalpoint Overlord of no one Staff

    Messages:
    38,334
    Likes Received:
    2,613
    Best Answers:
    462
    Trophy Points:
    710
    Digital Goods:
    29
    #8
    Site verification is similar to Google's ownership verification for Webmaster Tools.

    You can either upload a unique file that we give to a specific location of your site, or you can add a specific TXT record to the DNS for your domain.

    So either a user will need access to the hosting account the domain is on in order to upload the file or they would need access to be able to add DNS records to their domain.

    So yes... given enough resources, anything can be faked, but faking it involves hacking the user's hosting and/or DNS account.

    Unless you would like to enlighten me as to how you could upload a specific verification file via FTP to a specific location on a domain/site you don't own (like how would you fake the file upload to digitalpoint.com)?
     
    digitalpoint, Jan 2, 2012 IP
  9. ~~~~

    ~~~~ Well-Known Member

    Messages:
    2,875
    Likes Received:
    70
    Best Answers:
    1
    Trophy Points:
    175
    #9
    @Thread OP

    Why not ask the seller to upload a .txt file with the text of your choice while you have a talk with him on skype/IM? (Ask him to do it live)

    Altough this isn't a 100% secure method, but does help (Scammers will upload the file and vanish at the time of transferring the website)
     
    ~~~~, Jan 6, 2012 IP
  10. digitalpoint

    digitalpoint Overlord of no one Staff

    Messages:
    38,334
    Likes Received:
    2,613
    Best Answers:
    462
    Trophy Points:
    710
    Digital Goods:
    29
    #10
    If they could upload a specific file that we require for verification, they will be able to upload another file... so really not any better since you are doing the same thing.
     
    digitalpoint, Jan 7, 2012 IP
  11. dlatua

    dlatua Notable Member

    Messages:
    3,985
    Likes Received:
    65
    Best Answers:
    0
    Trophy Points:
    235
    #11
    A member like you can simply ask the seller to do the first step, After the domain is pushed and you have the site files, you can proceed with sending the payment. :)
     
    dlatua, Jan 7, 2012 IP
  12. ~~~~

    ~~~~ Well-Known Member

    Messages:
    2,875
    Likes Received:
    70
    Best Answers:
    1
    Trophy Points:
    175
    #12
    Doing it live would make the buyer assured of the fact that he actually owns the domain/site and isn't a hacked attempt, and having it done while a teamviewer session is on can help reduce the suspicion (I know it isn't the correct word, but I couldn't find a better substitute)

    But even then, it isn't bulletproof, if the seller is in the mood of playing scam games, he'll scam no matter what verification is done!

    Use escrow :)
     
    ~~~~, Jan 7, 2012 IP