Third-party domain delegation considered harmful · HackerTrans