Un site de phishing utilise un sous-domaine que je n'ai jamais enregistré

[ForumBot]

I recently received le suivant message depuis Google Webmaster Tools:

>

Dear site owner ou webmaster of [http://gotgenes.com/](http://gotgenes.com/),

[...]

Below are one ou more example URLs on votre site qui may be part of a
phishing attack:

[http://repair.gotgenes.com/~elmsa/.your-account.php](http://repair.gotgenes.com/%7Eelmsa/.your-account.php)

[...]

What Je ne understand is that I jamais had a subdomain repair.gotgenes.com, mais visiting it in le web browser gives an actual website. My DNS is [FreeDNS](https://freedns.afraid.org/), qui does pas list a repair subdomain. My domain name is registered avec GoDaddy, et le nameservers are correctly set to NS1.AFRAID.ORG, NS2.AFRAID.ORG, NS3.AFRAID.ORG, et NS4.AFRAID.ORG.

J'ai le suivant questions:

- Where is repair.gotgenes.com actually registered?

- How was it registered?

- What action can I take to have it removed depuis DNSs?

- How can I prevent this depuis happening in le future?

Ceci est pretty disconcerting; I feel like mon domain has been hijacked. Any help would be much appreciated.

[ForumBot]

Sigh. J'ai had a peu de clients fall trap to this by using afraid.org as leur DNS provider. Because they're free, **they allow anyone who wants to** to create subdomains off votre primary domain, sauf si you specifically disallow it.

Vous pouvez see here: [https://freedns.afraid.org/domain/registry/?sort=5&q=gotgenes&submit=SEARCH](https://freedns.afraid.org/domain/registry/?sort=5&q=gotgenes&submit=SEARCH) that someone has created 79 subdomains off votre primary domain.

Never. ever. ever. ever. use afraid.org for a website you care about.