Google Whois hacked

[dnb8]

look:

Whois Server Version 2.0 Domain names in the .com and .net domains can now be registered with many different competing registrars. Go to http://www.internic.net for detailed information. google.com.ZZZZZ.GET.LAID.AT.WWW.SWINGINGCOMMUNITY.COM google.com.ZOMBIED.AND.HACKED.BY.WWW.WEB-HACK.COM google.com.WORDT.DOOR.VEEL.WHTERS.GEBRUIKT.SERVERTJE.NET google.com.VN google.com.UA google.com.SUCKS.FIND.CRACKZ.WITH.SEARCH.GULLI.COM google.com.SPROSIUYANDEKSA.RU google.com.SA google.com.PLZ.GIVE.A.PR8.TO.AUDIOTRACKER.NET google.com.MX google.com.IS.NOT.HOSTED.BY.ACTIVEDOMAINDNS.NET google.com.IS.APPROVED.BY.NUMEA.COM google.com.HAS.LESS.FREE.PORN.IN.ITS.SEARCH.ENGINE.THAN.SECZY.COM google.com.DO google.com.BR google.com.AU google.com

http://whois.net/whois_new.cgi?d=google&tld=com

 

[McDot]

I had discovered this last month:

http://www.domainforum.info/viewtopic.php?p=72126#72126

At that time, the google.de Domain changed owner, apparently by mistake.
That was the reason for researching.

I find it strange, but many real large companies have a similar WhoIs.

Anyone know why?

 

[circa1850]

I read about this a while back (couple of weeks). Laughed myself silly. Someone "mistakenly?" transferred Google's name? What a HOOT!!!

I feel bad for whoever did it. Looking for a job, I would suspect.

 

[JasMate]

Wow so why have they not corrected it????

 

[Peter]

they have been like that for years. If you look they are not actually for google.com but for :-

SECZY.COM
com.SA
GULLI.COM

When you do a whois search for google.com it is retrieving any results that contain the term google.com. The domains in question have basically for dns purposes made subdomains that contain that term.

Of course the other main target is microsofts domain names.


The following is a blog post someone made that shows it which is from 2005 http://www.davidnaylor.co.uk/archives/2005/06/ it existed however long before then.

 

[fonzie_007]

How do you hack whois info? I would see three possible ways:
1) hack into the user's account at the registrar
2) hack into the registrar
3) hack into the central registry

 

[dhscott]

Its not hacked. Its just a bug.

http://www.qwhois.net and lookup google.com

 

[Optinom]

Yup, Seems like a bug on whois.net. All other whois services show proper google contacts.

 

[dnb8]

I checked also here http://nazwa.pl/whois.php?s=zb&d=google.com

 

[Optinom]

Whois.hm/google.com
whois.sc/google.com

Google.com is regged with markmonitor.com, who specialise in managing corporate domains. The whois links you've shown doesnt even show anything about markmonitor.com.

Further, everytime you make a whois it shows a different time here:

>>> Last update of whois database: Tue, 20 Feb 2007 18:35:53 UTC <<<

Whois servers dont get updated every second. Probably some exploit in the whois scripts used.

 

[Dave_Z]

Wow so why have they not corrected it????

Do they have to? No one's lost anything.

 

[dhscott]

Check out whois.net for the whois server they query for the results:

whois.crsnic.net

This server holds information on .com and .net registrations (I think its only these two). It does a query to find the domain asked for and refers you to the registrars whois server, examples are godaddy, enom, moniker etc.

The problem is whois.net isn't asking for google.com, it's querying the server for results to google.com and it finds lots of results in their so doesn't go to the whois server for google.com. Why crsnic has subdomains though, I don't know. It may be that someone has actually hacked the crsnic database, I don't know.

If you do a search on .uk names on whois.net, it shows the whois server as whois.nic.uk, france shows ... etc. etc.

Its only because .com and .net are not centralised is what I'm getting at.