Google.com WHOIS Hacked?

[Jose Cuervo]

Run a WHOIS on Google.com. This is what shows up (at least right now):

Whois Server Version 2.0

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.

Server Name: GOOGLE.COM.ZOMBIED.AND.HACKED.BY.WWW.WEB-HACK.COM
IP Address: 217.107.217.167
Registrar: ONLINENIC, INC.
Whois Server: whois.OnlineNIC.com
Referral URL: http://www.OnlineNIC.com

Server Name: GOOGLE.COM.VN
Registrar: ONLINENIC, INC.
Whois Server: whois.OnlineNIC.com
Referral URL: http://www.OnlineNIC.com

Server Name: GOOGLE.COM.UA
Registrar: DIRECT INFORMATION PVT LTD D/B/A PUBLICDOMAINREGISTRY.COM
Whois Server: whois.PublicDomainRegistry.com
Referral URL: http://www.PublicDomainRegistry.com

Server Name: GOOGLE.COM.SUCKS.FIND.CRACKZ.WITH.SEARCH.GULLI.COM
IP Address: 80.190.192.24
Registrar: KEY-SYSTEMS GMBH
Whois Server: whois.rrpproxy.net
Referral URL: http://www.key-systems.net

Server Name: GOOGLE.COM.PLZ.GIVE.A.PR8.TO.AUDIOTRACKER.NET
IP Address: 213.251.184.30
Registrar: OVH
Whois Server: whois.ovh.com
Referral URL: http://www.ovh.com

Server Name: GOOGLE.COM.MX
Registrar: DIRECT INFORMATION PVT LTD D/B/A PUBLICDOMAINREGISTRY.COM
Whois Server: whois.PublicDomainRegistry.com
Referral URL: http://www.PublicDomainRegistry.com

Server Name: GOOGLE.COM.IS.POWERED.BY.MIKLEFEDOROV.COM
IP Address: 195.131.167.11
Registrar: GO DADDY SOFTWARE, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com

Server Name: GOOGLE.COM.IS.NOT.HOSTED.BY.ACTIVEDOMAINDNS.NET
IP Address: 217.148.161.5
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com

Server Name: GOOGLE.COM.IS.APPROVED.BY.NUMEA.COM
IP Address: 213.228.0.43
Registrar: GANDI
Whois Server: whois.gandi.net
Referral URL: http://www.gandi.net

Server Name: GOOGLE.COM.HAS.LESS.FREE.PORN.IN.ITS.SEARCH.ENGINE.THAN.SECZY.COM
IP Address: 209.187.114.130
Registrar: INNERWISE, INC. D/B/A ITSYOURDOMAIN.COM
Whois Server: whois.itsyourdomain.com
Referral URL: http://www.itsyourdomain.com

Server Name: GOOGLE.COM.BR
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com

Server Name: GOOGLE.COM.AU
Registrar: PRIMUS TELCO PTY LTD DBA PRIMUSDOMAIN/PLANETDOMAIN
Whois Server: whois.planetdomain.com
Referral URL: http://www.planetdomain.com

Domain Name: GOOGLE.COM
Registrar: EMARKMONITOR INC. DBA MARKMONITOR
Whois Server: whois.markmonitor.com
Referral URL: http://www.markmonitor.com
Name Server: NS4.GOOGLE.COM
Name Server: NS3.GOOGLE.COM
Name Server: NS1.GOOGLE.COM
Name Server: NS2.GOOGLE.COM
Status: REGISTRAR-LOCK
EPP Status: clientUpdateProhibited
EPP Status: clientDeleteProhibited
EPP Status: clientTransferProhibited
Updated Date: 10-Apr-2006
Creation Date: 14-Sep-1997
Expiration Date: 13-Sep-2011

Hacked?

 

[Morph]

It's been like that for ages if i recall.

 

[dhscott]

You are using a dodgy website I suspect, results that show up on qwhois.net:

Registrant:
Google Inc. (DOM-258879)
Please contact [email protected] 1600 Amphitheatre Parkway
Mountain View CA 94043
US

Domain Name: google.com

Registrar Name: Markmonitor.com
Registrar Whois: whois.markmonitor.com
Registrar Homepage: http://www.markmonitor.com

etc..

 

[007]

Very odd. I've always seen the Markmonitor results as well.

Didn't Google start their own registrat recently? If I recall, that was huge news for a while. Why don't they just transfer their domaisn to themselves now?

 

[Jose Cuervo]

Hmm... that's probably true. I used DomainTools after you mentioned that and I got the "correct" results.

 

[Peter]

you get these type of results for alot of domains. Try the obvious other company who would be targetted (microsoft.com). Nothing has been hacked and these results are in proper whois servers (if you do a search on internic.net you should not see those results but on the other hand if you use whois.internic.net via the command line you will).

When you run the whois query it is looking for google.com and as it exists in all of those results it returns all of them.

 

[Kate]

Nothing new. It's a very old trick. All the funny results come from non-authoritative DNS servers so no harm done.

 

[meka2003]

Way too many hackers im sure have attempted to hack into google.