Whois Hijacking My Domain Research?

[suntech]

Has any one had any dealings with Chesterton Holdings ?

I found an interesting article on how someone may be hijacking my domain searches.
Whois Hijacking My Domain Research?

J.K.

 

[GreenGambler]

When I first started I would check 100's of DNs using Network Solutions. 3 months later when I had some cash to do more reg's I re-check'd some of my lists that I maked available and alot had been reged by Network solutions......... That was the last time I visited Network Solutions.com

 

[weblord]

usually domain registrar such as gd, netsol are doing that because of their extra domain services such as domain auctions/selling so it's not a new thing. i have mine snatch from me within an hour. it takes 1 hour from the mall with cybercafe and when i whois the said domain it's available when i return to house (so i could enter credit card details to buy the domain) it was already registered.

 

[suntech]

I can't say I've ever had this problem with whois searches from domaintools.com - formerly whois.sc - they've done a great job for me for years!
J.K.

 

[RsL]

Use www.Register4less.com for you domain checks, it is very nice, I have been using them for years, no problems, even days later.

 

[Lasher]

The guy writing those articles seems to have a huge problem with 'domain speculators' in general:

Whenever I write on this subject, I get a few e-mails from speculators who fancy themselves the equivalent of real estate developers. They flatter themselves.

I'm no big fan of Bob Parsons, but if this Larry Seltzer guy is going to steal his 'domain tasting' story he should at least credit him as a source.

 

[namebug]

I typed in chesterholdingsbuttmonkey.com at the cnet search site, curious to see if there is a holding page there in a few hours

 

[Lasher]

Hmm, interesting, 'chesterholdings.com' is available for reg.

 

[cyberoptik]

Its "Chesterton Holdings"

 

[texasgamer]

I searched for ChestertonHoldingsSucks.com :gn: Lets see how many names we can make ole chesterton reg... :lol:

 

[Dave_Z]

Whenever I write on this subject, I get a few e-mails from speculators who fancy themselves the equivalent of real estate developers. They flatter themselves.

That's just his opinion. And he's entitled to it, of course.

Interesting digging Seltzer made on Chesteron Holdings.

 

[suntech]

I typed in chesterholdingsbuttmonkey.com at the cnet search site, curious to see if there is a holding page there in a few hours

You clowns are always good for a laugh :blink: A great way to start the day!!
J.K.

 

[inflames]

WhoIs Searches May Be Compromised

By Michael Hayes
Friday, July 21, 2006
SAN FRANCISCO — Domain name queries may be compromised, according to eWeek.com columnist and Internet security expert Larry Seltzer, who believes that a shady cyber squatter is monitoring queries and registering domains before prospective site owners get a chance to do so.
Seltzer began his investigation after an email from a reader who complained that a company known as Chesterton Holdings had registered her query, placed a landing page at the domain and then dumped the site several days later only after seeing poor traffic results.

The Chesterton Holdings site, which gives virtually no information about the company or its owners, offers visitors the following description of its services:

"We acquire domain names through an automated process rather than by any process that would intentionally infringe on any person's rights. If you have any questions about a domain, please submit your query to us below. It is our policy to transfer a domain name to any entity that, in our reasonable opinion, has a legitimate claim. We will promptly transfer a domain name to you if you can show us that you have a legitimate claim."

According to Seltzer, his concerned reader had used CNET’s domain search page, which offers meta-search results from several services, including Web.com, Dot.FM, Enic.cc and APlus.net.

Seltzer ran his own domain queries using the same methods, finding that in less than 30 hours Chesterton Holdings had registered his queries.

A call placed by Seltzer’s reader to APlus.net suggested that Chesterton monitors WhoIs queries, something that Seltzer believes to be impossible.

Seltzer contacted CNET to inform them of the problem. While neither he nor CNET had any concrete answers, Seltzer decided to post.

“With a whole lot more testing, I think I could figure out the source of Chesterton's domain name feed, but I decided it was time to get the story out first,” he said.

Seltzer posited four theories on how Chesterton had accessed the WhoIs queries:


“CNET, or someone at CNET, could be passing the requests on to Chesterton. I don't believe this for a second.”

“One of the hosting services that CNET is checking with (and there could be more than they indicate) could be passing data on to Chesterton. This seems unlikely to me.”

“Chesterton could have compromised one of the servers involved in the process, for instance the WhoIs server used by one of the hosting services. This seems possible to me. There are a number of other hacking techniques, DNS cache poisoning for example, that could indirectly give Chesterton access to data from these queries.”

“Verisign could be passing the data on to Chesterton. I don't believe this, either.”
An XBIZ story in May reported that add/drop domain registration schemes were on the rise, according to GoDaddy.com CEO Bob Parsons. Practitioners of the schemes take advantage of the five-day window before they are charged for the domain, meaning that a company such as Chesterton, if Seltzer’s allegations are correct, could register compromised queries without incurring any registration costs.

Despite Seltzer’s efforts the mystery remains.

“Even though I've speculated on possibilities that are more or less likely than others, I don't think I'm close to a definitive explanation,” he said. “All I really know is that there's no legitimate way to do what Chesterton Holdings is doing, and I hope they finally get called for it.”

 

[IAmAllanShore]

I know that I've already commented on this phenomenon adnauseum, but I really am glad this story is gaining traction outside the forum community. cnet brings some weight to bear that we, unfortunately, just don't have.
-Allan :gl:

 

[Shorty]

I thought it was general public knowledge by now that whois engines are being watched. I am totally paranoid so I tell everyone I can to make their own, here's how.

<form action=whois.php method=post>
<br>
Domain:
<br>
<input type=text name=domain>
<br><br>
<input type=submit name=submit value=Whois!>

</form>

<?php 
$domain = $_POST['domain'];
$submit = $_POST['submit'];

if ($domain) {
	if ($submit == 'Whois!') {
		
echo nl2br(shell_exec("whois $domain"));
  		
	}
}
?>

Save the above as whois.php. It's a very rough script but at least you know somebody isnt recording your searches.

 

[verbster]

Some quick research found little info on Chesterton Holdings, Inc. Their websitse info is very limited, too.

They incorporated in California on 10/28/04 (C2690636). Their corporate address is different than what's in the whois records although both are in L.A. (818 WEST 7TH ST STE 700). Paracorp Incorporated (Sacramento) acted as their agent (Lynn R. Conner, President, is listed as the agent). There's more, but I haven't verified it yet.

Many articles about them (and their nefarious ways) found here:

http://www.business.com/search/rslt_default.asp?vt=all&query=chesterton+holdings&type=web

 

[EbookLover]

IMO, this is a pretty big deal and I hope something can be done about it in the near future.

 

[ukdom]

I agree that this is a big deal.
I use my own scripts and software to check whois etc. for exactly this reason.

Tim

 

[accent]

California Dreamin:

ICANN investigates, finds that Chesterton Holdings, Inc is cheating, and removes ALL their alledged ill-gotten domains. After proper trademark checks, these domains are released by LOTTERY - - - - -

NAW, Too logical.

 

[RJ]

I've been skeptical for a long time that this practice exists anywhere, but I now have proof that it does occur. I used the same CNET Domain Search mentioned in the article last week for two domains: everyonelovesrj.com and everyonehatesrj.com

BOTH were registered by Chesterton Holdings yesterday.

I've run similiar tests at GoDaddy, NameCheap, and other registrars accused of the practice and non have had conclusive results.