I was looking at my referring URL's today to my site (http://www.yourdownline.co.uk/) and I found this site referring to mine:

http://www.yourdownline.tk/

 

It has this in the source code:

<frameset rows="*,0" framespacing="0" border="0" frameborder="NO">

<frame src="http://yourdownline.co.uk/?rookieracer" name="dot_tk_frame_content" scrolling="auto" noresize>

</frameset>

<noframes>

 

He has obviously setup the site to refer more members but I just want to make sure that he cannot catch passwords / user data upon registration. Would there be a way that he can catch data?

www.dot.tk is merely a domain fowarding service. Whoever did this does not have access of the actual data (the framset etc) going into your site.

 

However there COULD be potential issues. If people start to use the .TK domain name, the person could then redirect the .TK domain name to a CLONED website. I.E. whoever goes on www.yourdownline.tk is taken to a site that looks like yours, but is not. It could be a copy of the site desgined to catch peoples registration information.

some information that might interest you..

 

ABUSE OF A DOMAIN NAME

If you want to report abuse of this domain name, please send a detailed email with your complaint to abuse@dot.tk. In most cases Dot TK responds to abuse complaints within one business day.

 

 

COPYRIGHT INFRINGEMENT

If you want to report a case of copyright infringement, please send an email to copyright@dot.tk, and include the full name and address of your organization. Within 5 business days copyright infringement notices will be investigated.

Thanks a lot for the help, I will probably just have a check on the site every now and again to make sure nothing strange is happening as I suppose you can simply email the support at .tk domains at any point

to be honest, if you dont want the risk of the .TK sending your customers / visitors to a hijacked website its probably just safer to e-mail .TK asap and ask them to remove the domain foward. Or maybe they can possibly give you access to the .tk domain set up instead, so that only you have access to it.