Your team wants a hosted docs site, a support portal, or a token-claim page. So, the vendor sends over a DNS record, and someone asks you to paste it into the control panel. Before you do, check what you’re connecting. Users will see your project’s domain, even when another company runs the service behind it. That familiar address carries trust, especially when ... View Post
Our latest blog posts
Case Study: The Polymarket and Debug Bear DNS Compromise
“But it may be easier for an attacker to simply hack into your registrar account or other platform that has the ability to manipulate your domains, and hijack them.” — Mark E. Jeftovic, Managing Mission Critical Domains and DNS, “Protecting your domains from unauthorized manipulation.” [6] On October 29, 2026, that risk reached Polymarket’s customers ... View Post
Before You Change Name Servers, Check Your DNSSEC
You copied the DNS records, checked the website, and changed the name servers. Except, now customers say the site will not load. Yet, your server is healthy, and the new DNS provider is answering queries. Before you restart anything, check the DS record. With DNSSEC enabled, moving DNS providers can leave a broken link in the system that proves your DNS answers ... View Post
Customer Security Advisory – Critical Updates for PHP, Node.js, and Certificate Trust
Date: October 21, 2026 This post covers three recent security issues that affect widely used web technologies. These are important to address, but they are also manageable. Our development and operations teams are actively working right now to patch and update all customer instances across our networks. Most customers will not need to take any action ... View Post
Can You Warn Customers When Your Website and Email Are Both Down?
Your website is down, and customers are calling. Then, as the support team drafts an email explaining the outage, you realize they can't send it because your company’s email is affected too. Now support has two jobs: Finding out what happened. Finding a way to tell people. Meanwhile, customers keep retrying failed logins and opening tickets. An ... View Post
You Bought the Company. Did You Get Control of Its Domains?
The acquisition has closed. The website is still running, and somebody has sent your IT team a spreadsheet of passwords. Before you mark the domain handover complete, try one more thing: Administer it without calling the seller: Can your team sign in with its own authentication methods? Receive a recovery message? Authorize a critical change? A ... View Post






