Nameserver problems - Any domain techies in the house .. ?

[gazzip]

I have 3 domains where I have changed the nameservers to my hosting space, one of them was done months ago and the other 2 were done a few days ago. (sorry I don't want to say the domains)

what is happening is that my websites are not showing all the time I check, some of the time they resolve to a parking page that has nothing to do with me and I'm not very pleased about it either

The parking page seems to download from i.nuseek.com and it looks exactly like the enom parking page. (even though the domains are not with enom)

I really don't know what is going on here ??


For some strange reason when I check the 3 domains whois records at domaintools whois.sc in the top part it shows my nameservers as:

ns1.thehostplace.com
ns2.thehostplace.com

but at the lower part of the page it shows the nameservers as

ns2.thehostplace.com
ns1.thehostplace.com << ie: looks backwards



The nameservers look normal in my account and i'v been in contact with my registrars support but they keep telling me the domains resolve to my website (which they don't all of the time).

I'v just emailed my hosting company to take a look but have'nt heard back from them yet.

So, is it something I have done wrong ? Is it the registrar doing it or do you think it is something to do with my hosting ?

any ideas beacause I'm really stumped

Thanks



.

 

[npcomplete]

Perhaps it is the caching nameservers giving you strange results?

What I do is set the TTL (time to live) for my domains to a fairly large value. Then when I anticipate changing things I set the TTL to a very small value so that the DNS is not cached. Then I push the changes to the nameserver.

I have seen these kinds of things frequently on my own names. Just give it a few days if you are confident everything is setup properly.

Edit: Of course you may not be running your own nameservers... in which case you just need to wait for a few days.

 

[mis_chiff]

How ironic, I currently have the exact same issue,
mine are going to a Sedo parking page, yet it was changed
to private hosting over a month ago.
I contacted Sedo and they said it's the host.
I contacted the host and he told me to clear
the cache and cookies, if it still persists to let him know.
That was 10 minutes ago, and it is still doing it.

Sedo also said that my website did resolve for them,
and google is showing traffic - but still not for me.

I'll post what my host says, maybe you'll hear from yours first

 

[gazzip]

Perhaps it is the caching nameservers giving you strange results?

What I do is set the TTL (time to live) for my domains to a fairly large value. Then when I anticipate changing things I set the TTL to a very small value so that the DNS is not cached. Then I push the changes to the nameserver.

I have seen these kinds of things frequently on my own names. Just give it a few days if you are confident everything is setup properly.

Edit: Of course you may not be running your own nameservers... in which case you just need to wait for a few days.

I'm not using my own servers and one of the domains has been doing this for probably about 6 months or more, the other two I just uploaded sites to 3 or 4 days ago.

I'm not a techie but it sure looks like somebody is deliberately skimming large amount of traffic at various times of the day and diverting it to a PPC page that has something to do with nuseek.com. Unfortunately privacy is set on nuseek.com

The parking page that is shown on my 3 domains (maybe more) is the same as this one www.name-services.com

Domain name: name-services.com

contact has privacy protect on

Registrant Contact:
eNom, Inc.
DNS Manager ()

Fax:
P.O. Box 7449
2002 156th Avenue NE, Ste. 300
Bellevue, WA 98007
US

...................................................................

whois for the domain Enom.com

Domain name: enom.com

contact has privacy protect on

Registrant Contact:
eNom, Inc.
DNS Manager ()

Fax:
PO Box 7449
Bellevue, WA 98008
US

Name Servers:
dns1.name-services.com
dns2.name-services.com
dns3.name-services.com
dns4.name-services.com
dns5.name-services.com

Both domains are using name-services.com as their nameservers

........................................

whois for nuseek.com (from where the parking pages on my domains download from)

Contact has privacy protect on

+1.4252740657
Fax: +1.4256960234
PMB 368, 14150 NE 20th St - F1
C/O nuseek.com
Bellevue, WA 98007
US

Name Servers:
dns1.name-services.com
dns2.name-services.com
dns3.name-services.com
dns4.name-services.com
dns5.name-services.com

...so all three domains use the nameservers > name-services.com


Like I said I have no idea how the internet really functions but from what I can see it looks like.

someone is diverting lots of traffic from other peoples domains and sending it to PPC pages held on the domain name-services.com - so who is collecting that PPC money ????.

is enom.com responsible for this ? I don't know but something stinks of fish !


How many thousands of other people could this be happening to ?

Here's another person (not me) that is having the same problems.
http://antionline.com/showthread.php?t=276894

Although I don't understand the techie bits that are discussed in the thread.


If we knew who owned nuseek.com maybe we would find out

any thoughts on this as it may be effecting you too ?


ps - I may be totally wrong but this is what I am seeing

I have'nt heard back from my hosting company yet, maybe its something to do with them ??


thanks . :td:


.

How ironic, I currently have the exact same issue,
mine are going to a Sedo parking page, yet it was changed
to private hosting over a month ago.

I think this may be happening to thousands of people TBH

I just checked yours after your PM, it looks like it is ok, website has a homestead banner on it ...for now !!

Problem is that it seems to happen at various times of the day...at random

LOL - luv the siggy mis_chiff
.

 

[notlikeyou]

looks like this might be a trend for nuseek, there sure are a lot of google results for them & DNS hacking. Can't be a coincidence.

 

[footodors]

I'd say your hosting co. before enom.

 

[gazzip]

looks like this might be a trend for nuseek, there sure are a lot of google results for them & DNS hacking. Can't be a coincidence.

something fishy is going on, strange how name-services.com keeps popping up everywhere.

I would assume that a company of enoms size would likely have their own servers. If so why are PPC ads on my domains downloading from their servers ? ...especially since my domain is not even at their registrar

I guess it could still be something to do with my hosting account perhaps ??

one way or other I am going to find out, anyone know who the top dog at enom is ?


.

I'd say your hosting co. before enom.

yeah, I sure would hope so too


just looked at nuseek.com on Alexa- traffic down 96% with a huge drop in the middle of August 2008
http://www.alexa.com/data/details/traffic_details/nuseek.com


.....looks to me like someone may be trying to pull the plug on something ???


.

 

[npcomplete]

PM sent.

When you check the root server A.GTLD-SERVERS.NET it points to one place for the Start of Authority (the "official" name server for your domain as viewed by the root). When you then check the place that the root points to it points to one IP address for your domain, and then refers to a *different* SOA. When you check that *different* SOA server it gives a different address than the IP returned by the root server SOA for the record.

It looks like the name servers are incorrectly programmed. Even without the SOA confusion, the various nameservers should point to the same place.

When there are multiple addresses (without SOA confusion), then modern nameservers do a "round-robin" kind of thing and assign the domain at random to one of the multiple IP addresses. This is used for load balancing. It works well as long as that is what is intended... and totally messes things up when that is not intended.

 

[gazzip]

I just got another email from my Registrar

Their reply

"As I told you earlier, there are no issues with the resolution of your website. Even when I resolved the*domain.com/, the site resolved without any issues.

hmmm

Many thanks for looking in to it npcomplete :tu: although I don't fully understand all that your PM makes me think this is more of an issue with my hosting companies servers.

hopefully I will hear back from them soon

many thanks :tu:

..damn domaining is turning me paranoid :hehe:


.

 

[mis_chiff]

My host got back to me saying the same thing,
that the domain is resolving for him. I told him
it resolves for anyone else but me!
I can go next door and it'll work on my neighbours
computer. But it still won't work on mine!
So he asked me to provide public IP and traceroute result
for that specific domain. After doing so, he said everything looks fine,
he said he didn't do anything - YET - my domain is now working
So something happened....

I don't think he fully understood till I told him everyone else
can see it but me...I hope they get yours going

 

[npcomplete]

I just got another email from my Registrar

Their reply

"As I told you earlier, there are no issues with the resolution of your website. Even when I resolved the*domain.com/, the site resolved without any issues.

hmmm

Many thanks for looking in to it npcomplete :tu: although I don't fully understand all that your PM makes me think this is more of an issue with my hosting companies servers.

hopefully I will hear back from them soon

many thanks :tu:

..damn domaining is turning me paranoid :hehe:


.

No problem. I would just forward my PM comments to your host/ISP or wherever you are receiving nameservice for the domains. Registrars usually get these things straight, but in my experience the errors usually come downstream at the host/ISP level. After looking at the data starting at the Root and then drilling down to your host/ISP servers it appears that it is the host/ISP problem.

As it stands, the DNS system is hopelessly confused with the following:

1.) What is the true "Start of Authority" (SOA) (analysis shows confusion on that issue)

2.) What is the IP for your domain (analysis shows that the different nameservers listed as SOA have radically different IP addresses)

So there are at least two problems in the nameserver setup. Killing the errant SOA (the old one) will fix both problems.

 

[gazzip]

No problem. I would just forward my PM comments to your host/ISP or wherever you are receiving nameservice for the domains. .

Will do, many thanks - I'll let you know if/when it gets resolved.


.

 

[weblord]

is this resolved? i would like to help out.
you may check your dns using this tool
http://network-tools.com/
it's more updated.

 

[gazzip]

Thanks everyone, Looks like this issue has just been resolved but I'll be keeping my beady little eyes on it for a while :tri:

Appears to have been a hosting server issue but I don't know if it was a deliberate one or not ?? someone must have been getting paid for those clicks on my domains and it sure was'nt me !

npcomplete looked at it for me and I sent his technical comments to my hosting company....after which, they eventually managed to sort it out.


many thanks npcomplete :great: :tu:


.

 

[npcomplete]

Thanks everyone, Looks like this issue has just been resolved but I'll be keeping my beady little eyes on it for a while :tri:

Appears to have been a hosting server issue but I don't know if it was a deliberate one or not ?? someone must have been getting paid for those clicks on my domains and it sure was'nt me !

npcomplete looked at it for me and I sent his technical comments to my hosting company....after which, they eventually managed to sort it out.


many thanks npcomplete :great: :tu:


.

Glad to help gazzip. Helping a great domainer like you is an honor.

 

[gazzip]

......Helping a great domainer like you is an honor.

Hmmm, I wish I was, I'd be loaded by now :yell: ....but cheers for the compliment


With a great community like NPros helping out I hope to be one day !



.