Skip to content

Instantly share code, notes, and snippets.

@tinogomes
Last active April 15, 2024 07:22
Show Gist options
  • Save tinogomes/c425aa2a56d289f16a1f4fcb8a65ea65 to your computer and use it in GitHub Desktop.
Save tinogomes/c425aa2a56d289f16a1f4fcb8a65ea65 to your computer and use it in GitHub Desktop.
Public DNS Pointing to localhost (127.0.0.1)

Available Public Wildcard DNS Domains pointing to localhost (127.0.0.1)

The best way to safely and securely use local domains pointing to 127.0.0.1 is to edit your local settings (/etc/hosts) and add your own settings. Keep in mind if you want to use subdomains, you need to enter all variations.

Example:

# Adding bottom of your current file /etc/hosts
################# MY LOCAL DOMAINS
127.0.0.1 local.com admin.local.com
127.0.0.1 domain1.com
127.0.0.1 api.domain1.com

I HAVE NO RESPONSIBILITY FOR ANY DOMAINS LISTED HERE, OR IN THE COMMENTS, AND IF ANY OF THEM CAPTURE ANY DATA TRANSMITTED BY THE HTTP REQUEST. AT ANY TIME, ANY OF THE DOMAINS LISTED IN THIS ARTICLE MAY STOP WORKING (EXCEPT localhost).

It turns out that some kind hearted people already set up wildcard domains for you already. You can use any domain below and/or any subdomain of these and they currently resolve to 127.0.0.1 but could switch at any time to resolve somewhere else. Here's the list of ones I know about. Let me know if there are more!

Of course, you can setup your own local domain.

Need to use SSL?

sources:

IF YOU ARE COMMENTING TO SHARE A NEW DOMAIN, PLEASE ADD A POINT VERIFICATION LINK TO [check it](https://dnschecker.org/#A/your-domain)

@tinogomes
Copy link
Author

lvh.me seems down. It seems it's been lost and parked

😞

@zacheryph
Copy link

It is really kind of a shame that google didnt "pre allocate" and point local.dev to localhost.

@wtesler
Copy link

wtesler commented Jun 28, 2021

Are there any which point to https://localhost ? I'm running my localhost on https.

@tinogomes
Copy link
Author

tinogomes commented Jun 28, 2021

Are there any which point to https://localhost ? I'm running my localhost on https.

You must to setup on your web server to redirect all http requests to https. (apache/nginx/etc...)

@ICEatm
Copy link

ICEatm commented Aug 18, 2021

Also.. I don't know how I found this but..

fbi.com

Also works for me...

@tinogomes
Copy link
Author

Comment from: @darby-dev
Also.. I don't know how I found this but..
fbi.com
Also works for me...

That's amazing!

@spaceaardvark
Copy link

"they will always resolve back to 127.0.0.1 (your local machine)"

should be

"they currently resolve to 127.0.0.1 but could switch at any time to resolve somewhere else."

@tinogomes
Copy link
Author

@spaceaardvark much better. tks

@tomlankhorst
Copy link

@pelletencate
Copy link

@tomlankhorst That's not how nip.io works. You probably meant [*.]127-0-0-1.nip.io. If you click the link you can see how it routes different subdomains.

@tomlankhorst
Copy link

tomlankhorst commented Oct 27, 2021

I meant that nip.io points to any IP e.g. localhost via *.127.0.0.1.nip.io, as explained on the linked page:

nip.io maps <anything>[.-]<IP Address>.nip.io in "dot", "dash" or "hexadecimal" notation to the corresponding <IP Address>

@inputdrive
Copy link

also this netfinity.hostedrmm.com

@renatofrota
Copy link

localhost can be updated to [*.]localhost. note: a wildcard SSL for *.localhost won't be accepted by most browsers (reason: it's considered a top level wildcard, like *.com) but *.anything.localhost (e.g.: *.dev.localhost) is ok.

you can also add [*.]localhost.direct, which has public available (valid) wildcard certificate for download at https://get.localhost.direct/

@fidian
Copy link

fidian commented Jun 28, 2022

I'm going to drop support for fuf.me. There's plenty of alternatives and this appears to impact 0 users. Please remove the entry when you have time.

Also, fidian.com content is being removed, so maybe remove the link to the soon-to-be-defunct site.

@tinogomes
Copy link
Author

tinogomes commented Jun 28, 2022

I'm going to drop support for fuf.me. There's plenty of alternatives and this appears to impact 0 users. Please remove the entry when you have time.
Also, fidian.com content is being removed, so maybe remove the link to the soon-to-be-defunct site.

@fidian

Sad to hear this, but removed!

@johanponken
Copy link

Just to comment on localho.st
Parked (NS=parking.st) since (at least) 2021-08-12 (updated date:)
nic.st/whois for localho.st

@mralston
Copy link

mralston commented Sep 2, 2022

@qinlili23333
Copy link

local.qinlili.bid

I made a new one, with HSTS preloaded, can be used in some special circumstances

@zacheryph
Copy link

It seems like vcap.me is no longer an option for this.

@365cent
Copy link

365cent commented Mar 2, 2023

*.ssh.town

@AndrewJMcDonald
Copy link

*.lndo.site

@quetzalcoatl
Copy link

127-0-0-1.org.uk seems to be down, with and without prefix

@RoSk0
Copy link

RoSk0 commented Jun 19, 2023

Today lots of my development environments suddenly stopped working because uBlock Origin extension for Firefox included this domain from the EasyPrivacy list referencing this gist.

Please remove lndo.site from this list. It is a valid development setup for the Lando project. lndo.site is used by default in the proxy configuration to simplify developers life.

@almunnings
Copy link

almunnings commented Jun 20, 2023

There should be a proper policy around adding domains to this and future iterations of this list, as legitimate useful domains for development tools get caught up in the hyperbole.

easylist/easylist#16372 has good conversation on the topic.

@xurizaemon
Copy link

@almunnings my read of it is that this list is "here's a convenient list of DNS pointing to 127.0.0.1" which was interpreted as "here's a list of threats"

DNS Rebinding attacks exist, but mostly not on a wildcard with a high TTL. And domains are cheap, attackers will get their own.

@tinogomes
Copy link
Author

tinogomes commented Jun 20, 2023

@xurizaemon You understand the propose of this gist.

Anyway, I added an opening paragraph, explaining that if someone wants to be 100% secure in using a domain pointing to 127.0.0.1, they should make their own settings on their local machine.

Today, of the domains listed here, I have some responsibility for the cefgo.com and local.sisteminha.com domains, as they are under my responsibility. And as written, it can crash at any time.

@tinogomes
Copy link
Author

And thank you all for comment here. I hope this gist continues to be useful to everyone.

@synercoder
Copy link

For work I have registered my own domain to use: localfabriek.nl.

@synercoder
Copy link

Also the last paragraph uses the url dsnchecker.com, so dsn instead of dns and .com instead of .org ;)

@tinogomes
Copy link
Author

Also the last paragraph uses the url dsnchecker.com, so dsn instead of dns and .com instead of .org ;)

@synercoder thank you for typo fixes

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment