I have a domain, for example, example.com, whose DNS is hosted in http://freedns.afraid.org.
Strangely, when testing web site for vulnerabilities, I've found that when using "localhost.example.com", 127.0.0.1 is resolved. Why is that and how can I avoid it? in afraid.org there is no localhost entry as an A record.
In the server itself, there is no localhost entry in /etc/hosts file.
This is a Windows 2016 server.