full-disclosure - Whois acting funny in FreeBSD

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <3E71BE64C6ECD8449CD5A236F700FA96B8786F@odcexch.wei.owhc.net>
From: mbassett at omaha.com (Bassett, Mark)
Subject: Whois acting funny in FreeBSD

Its not just your boxes, check msn.com at www.betterwhois.com

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.MSN.COM.TW
MSN.COM.SUCKS.FIND.CRACKZ.WITH.SEARCH.GULLI.COM
MSN.COMTo single out one record, look it up with "xxx", where xxx is one
of the
of the records displayed above. If the records are the same, look them
up
with "=xxx" to receive a full display for each record.NOTICE: The
expiration date displayed in this record is the date the 
registrar's sponsorship of the domain name registration in the registry
is 
currently set to expire. This date does not necessarily reflect the
expiration 
date of the domain name registrant's agreement with the sponsoring 
registrar.  Users may consult the sponsoring registrar's Whois database
to 
view the registrar's reported date of expiration for this registration.

Mark Bassett
Network Administrator
World media company
Omaha.com
402-898-2079

-----Original Message-----
From: Chris McGinnis [mailto:chrism@...ireless.com] 
Sent: Tuesday, December 30, 2003 12:43 PM
To: full-disclosure@...ts.netsys.com
Subject: [Full-Disclosure] Whois acting funny in FreeBSD

Today I've noticed something weird on all my FreeBSD boxes.  When I
whois 
domains like msn.com, microsoft.com, aol.com and others I get stuff
like:

$ whois msn.com

Whois Server Version 1.3

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.

MSN.COM.TW
MSN.COM.SUCKS.FIND.CRACKZ.WITH.SEARCH.GULLI.COM
MSN.COM

My linux boxes seem to work fine.  When I query a specific whois server 
such as whois.networksolutions.com it works fine also.  Is anyone else 
getting anything like this?  I'm thinking maybe the default whois server

that the whois program queries has been compromised?  I'm not sure what
the 
default whois server is.

-Chris

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

************************************************************
Omaha World-Herald Company computer systems are for business use only.
This e-mail was scanned by MailSweeper
************************************************************