What's in the eBook?
- Full list of reasons for poor performance
- Ultimate measures to speed things up
- Primary web monitoring types
- KPIs you should be monitoring in order to increase your ROI
Course Of The Month
8 days, 18 hours left to enrollBecome a Premium Member and unlock a new, free course in leading technologies each month.
Solved
Weird domain name entries for microsoft.com
Posted on 2006-11-20
When I go to this link and search for google.com or microsoft.com:
http://www.whois.net/whois_new.cgi?d=microsoft&tld=com
I get a lot of strange entries like:
MICROSOFT.COM.ZZZZZ.GET.LA
MICROSOFT.COM.ZZZOMBIED.AN
MICROSOFT.COM.ZZZ.IS.0WNED
MICROSOFT.COM.WILL.LIVE.FO
MICROSOFT.COM.WILL.BE.SLAP
MICROSOFT.COM.WILL.BE.BEAT
MICROSOFT.COM.WAREZ.AT.TOP
How is this done? And how can I prevent my domain from having the same type of problem?
http://www.whois.net/whois_new.cgi?d=microsoft&tld=com
I get a lot of strange entries like:
MICROSOFT.COM.ZZZZZ.GET.LA
MICROSOFT.COM.ZZZOMBIED.AN
MICROSOFT.COM.ZZZ.IS.0WNED
MICROSOFT.COM.WILL.LIVE.FO
MICROSOFT.COM.WILL.BE.SLAP
MICROSOFT.COM.WILL.BE.BEAT
MICROSOFT.COM.WAREZ.AT.TOP
How is this done? And how can I prevent my domain from having the same type of problem?
[X]
Welcome to Experts Exchange
Add your voice to the tech community where 5M+ people just like you are talking about what matters.
- Help others & share knowledge
- Earn cash & points
- Learn & ask questions
-
3
5 Comments
you can't.
MICROSOFT.COM.WAREZ.AT.TOP
'com' is the top level domain
and somebody has taken the 'gulli ' second level domain.
then this person probably has taken the control of his domain from the domain name seller.
than at his dns server he created the
toplist subdomain
at subdomain
warez subdomain
com subdomain
microsoft subdomain
the second 'com' isn't the top-level domain 'com'.
if its been created in the records of the domain seller's server, maybe you have a chance to warn the company.
MICROSOFT.COM.WAREZ.AT.TOP
'com' is the top level domain
and somebody has taken the 'gulli ' second level domain.
then this person probably has taken the control of his domain from the domain name seller.
than at his dns server he created the
toplist subdomain
at subdomain
warez subdomain
com subdomain
microsoft subdomain
the second 'com' isn't the top-level domain 'com'.
if its been created in the records of the domain seller's server, maybe you have a chance to warn the company.
also these subdomains shouldn't be listed with whois.. but whois doesn't search your exact term.. and any registrar (there are a lot of registrars now) gives these 'funny' whois information then it must be listed.
actually it isn't the problem of internic.net. if you go to their site
www.internic.net and look the whois info. there
you will see the actual whois records of microsoft.com
now the gulli.com has given extra whois information and this is the problem.
maybe you could warn the 'false'(literally) registrar not to use that information
but this is again not a solution..cos there is actually a
MICROSOFT.COM.WAREZ.AT.TOP
actually it isn't the problem of internic.net. if you go to their site
www.internic.net and look the whois info. there
you will see the actual whois records of microsoft.com
now the gulli.com has given extra whois information and this is the problem.
maybe you could warn the 'false'(literally) registrar not to use that information
but this is again not a solution..cos there is actually a
MICROSOFT.COM.WAREZ.AT.TOP
Active 6 days ago
I've seen this too, my whois runs against crsnic.net (verisign) and returns those same results, but another PC hit's OpenSRS/TuCows for the actual record. I think it might have something to do with a DNS poison, or some misconfiguration... if you do a whois for microsoft.com.net or google.com.net you'll see these same results...
http://www.whois.net/whois_new.cgi?d=microsoft.com&tld=net
http://www.whois.net/whois_new.cgi?d=google.com&tld=net
This is because com.net is Sogo and for some reason whois is searching com.net... weird...
-rich
http://www.whois.net/whois_new.cgi?d=microsoft.com&tld=net
http://www.whois.net/whois_new.cgi?d=google.com&tld=net
This is because com.net is Sogo and for some reason whois is searching com.net... weird...
-rich
no it's not a dns poisoning.. like i said above it's just stupid :)
Searching for MICROSOFT.COM.WAREZ.AT.TOP
Searching for MICROSOFT.COM.WAREZ.AT.TOP
Searching for MICROSOFT.COM.WAREZ.AT.TOP
microsoft.com.warez.at.top
ns1.gulli.com just gives its A record for the address.
and both of the addresses are in the same class: A:80.190.192.33 and ns1: 80.190.192.41
which tells me dns zone controlled by the person who put this record in dns.
Searching for MICROSOFT.COM.WAREZ.AT.TOP
Searching for MICROSOFT.COM.WAREZ.AT.TOP
Searching for MICROSOFT.COM.WAREZ.AT.TOP
microsoft.com.warez.at.top
ns1.gulli.com just gives its A record for the address.
and both of the addresses are in the same class: A:80.190.192.33 and ns1: 80.190.192.41
which tells me dns zone controlled by the person who put this record in dns.
To put this simply, if you own a domain name, you can have as many subdomains with whichever names you please. For example:
If I owned SUCK.COM, I could make YOU.SUCK.COM, POLITICIANS.SUCK.COM, or even THOSE.COOKIES.YOU.BAKED.LA
There is no way to stop people from doing this with a domain they own.
Cheers!
If I owned SUCK.COM, I could make YOU.SUCK.COM, POLITICIANS.SUCK.COM, or even THOSE.COOKIES.YOU.BAKED.LA
There is no way to stop people from doing this with a domain they own.
Cheers!
Featured Post
Question has a verified solution.
If you are experiencing a similar issue, please ask a related question
A look at what happened in the Verizon cloud breach.
Part One of the two-part Q&A series with MalwareTech.
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email
Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…
Suggested Courses
Earn Certification
HTML5 Specialist - Certification
Free withPremium
Course of the Month8 days, 18 hours left to enroll
Earn Certification
Cisco CCNP Security: SENSS
$197.00$177.30
Earn Certification
Cisco CCNP Security: SITCS
$197.00$177.30
615 members asked questions and received personalized solutions in the past 7 days.
Join the community of 500,000 technology professionals and ask your questions.