RE: [Full-Disclosure] Whois acting funny in FreeBSD

From: Bassett, Mark (mbassett_at_omaha.com)
Date: 12/30/03

  • Next message: Rev. Kronovohr: "Re: [Full-Disclosure] Whois acting funny in FreeBSD" 
    To: "Chris McGinnis" <chrism@t3wireless.com>, <full-disclosure@lists.netsys.com>
Date: Tue, 30 Dec 2003 13:34:08 -0600

    Its not just your boxes, check msn.com at www.betterwhois.com

    Domain names in the .com and .net domains can now be registered
    with many different competing registrars. Go to http://www.internic.net
    for detailed information.MSN.COM.TW
    MSN.COM.SUCKS.FIND.CRACKZ.WITH.SEARCH.GULLI.COM
    MSN.COMTo single out one record, look it up with "xxx", where xxx is one
    of the
    of the records displayed above. If the records are the same, look them
    up
    with "=xxx" to receive a full display for each record.NOTICE: The
    expiration date displayed in this record is the date the
    registrar's sponsorship of the domain name registration in the registry
    is
    currently set to expire. This date does not necessarily reflect the
    expiration
    date of the domain name registrant's agreement with the sponsoring
    registrar. Users may consult the sponsoring registrar's Whois database
    to
    view the registrar's reported date of expiration for this registration.

    Mark Bassett
    Network Administrator
    World media company
    Omaha.com
    402-898-2079

    -----Original Message-----
    From: Chris McGinnis [mailto:chrism@t3wireless.com]
    Sent: Tuesday, December 30, 2003 12:43 PM
    To: full-disclosure@lists.netsys.com
    Subject: [Full-Disclosure] Whois acting funny in FreeBSD

    Today I've noticed something weird on all my FreeBSD boxes. When I
    whois
    domains like msn.com, microsoft.com, aol.com and others I get stuff
    like:

    $ whois msn.com

    Whois Server Version 1.3

    Domain names in the .com and .net domains can now be registered
    with many different competing registrars. Go to http://www.internic.net
    for detailed information.

    MSN.COM.TW
    MSN.COM.SUCKS.FIND.CRACKZ.WITH.SEARCH.GULLI.COM
    MSN.COM

    My linux boxes seem to work fine. When I query a specific whois server
    such as whois.networksolutions.com it works fine also. Is anyone else
    getting anything like this? I'm thinking maybe the default whois server

    that the whois program queries has been compromised? I'm not sure what
    the
    default whois server is.

    -Chris

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html

    ************************************************************
    Omaha World-Herald Company computer systems are for business use only.
    This e-mail was scanned by MailSweeper
    ************************************************************

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html

  • Next message: Rev. Kronovohr: "Re: [Full-Disclosure] Whois acting funny in FreeBSD"

    Relevant Pages

    • Re: Retrieving info from a whois query
      ... and maybe some advice on how to retrieve and parse the file.. ... Internic no longer allows scripted access to the whois information, ... There are whois applicatons that search most of the registrars for the ...
      (comp.lang.php)
    • "SRC=69.28.159."
      ... The "whois comes back like this: ... [root@localhost root]# host 69.28.159.7 ... different competing registrars. ... Whois Server: whois.godaddy.com ...
      (comp.os.linux.security)
    • Re: (Semi-OT) Understanding whois info....
      ... Norberto Meijome wrote: ... The data seems to be coming from Verisign's whois servers.... ... Whois Server Version 1.3 ... with many different competing registrars. ...
      (freebsd-questions)
    • Re: Retrieving info from a whois query
      ... It's also advised on how to collect the data from the whois query and to ... We de have a lot of registrars, this is what we will go on with the whois ... domaines we own and as they are displayed like 20 domaines/page, ...
      (comp.lang.php)
    • Re: NNNews Flash: Blind Squirrel Finds Nut!
      ... I wonder if this violates copyright law. ... While I license my ... with many different competing registrars. ... Whois Server: whois.bizcn.com ...
      (rec.scuba)