Adobe.com domain name hijacked

from Gerald Oskoboiny <[email protected]>, Thu, 19 Oct 2000 15:54:53 -0400

Replies:

gerald

Parents:

None.

http://it.fairfax.com.au/breaking/20001019/A61112-2000Oct19.html

> Adobe.com domain name relocates to China
> Thursday, October 19, 2000, 16:56
> By BARRY PARK, FAIRFAX IT
>
> A Chinese resident has taken the adobe.com domain name away from
> imaging software company Adobe Systems.

cf. webtechs.com snafu from last year:
http://www.w3.org/People/Connolly/9903webtechs-snafu.html

Nice to see it happen to a large company! This should make it
into mainstream press soon. (though it's not clear to me yet
who's at fault in this case)

> Xiamen, China website administrator Hill Lee told Fairfax IT via
> email today that he registered the adobe.com domain name as a
> "joke" against the Internet Corporation for Assigned Names and
> Numbers, the United Statesbased domain name system management
> authority, after his website's domain name was hijacked last
> month.
>
> Lee said he discovered the domain was available after randomly
> searching for available names.
>
> He said registering the adobe.com domain name had not harmed
> Adobe's website, and he was waiting for Adobe to contact him
> after deciding to hand it back to the company.

...had not harmed Adobe, except for that little matter about lost
revenue from order processing [1], and bouncing email.

> Adobe Systems was unavailable for comment late today.
>
> Visitors to the company's websites earlier today said they had
> experienced problems with subdomains under Adobe's top level
> domain at www.adobe.com.
>
> Whois database details showed the database was updated on October
> 16, and listed the domain name's registrar as Xin Net Corp. The
> domain name's registration rolled over on that date, suggesting
> Adobe had overlooked updating its registration.
>
> The domain's referral URL, www.paycenter.com.cn, pointed to a
> Chinese language website.
>
> Registration details late today changed to list California-based
> Adobe Systems as the domain's registrant using a Chinese address,
> and Lee as the administrative contact.

[1] http://www.camworld.com/misc/adobecom.txt

--
Gerald Oskoboiny <[email protected]>
http://impressive.net/people/gerald/

Re: Adobe.com domain name hijacked

from Gerald Oskoboiny <[email protected]>, Sat, 21 Oct 2000 16:58:08 -0400

Replies:

None.

Parents:

gerald

On Thu, Oct 19, 2000 at 03:54:53PM -0400, Gerald Oskoboiny wrote:
> http://it.fairfax.com.au/breaking/20001019/A61112-2000Oct19.html

> > A Chinese resident has taken the adobe.com domain name away from
> > imaging software company Adobe Systems.
>
> cf. webtechs.com snafu from last year:
> http://www.w3.org/People/Connolly/9903webtechs-snafu.html
>
> Nice to see it happen to a large company! This should make it
> into mainstream press soon. (though it's not clear to me yet
> who's at fault in this case)

Still hasn't shown up on news.com or wired.com... strange.
(adobe.com seems to be back in Adobe's control now.)

Meanwhile, microsoft.com has been hijacked, or something:

| devo: gerald> whois microsoft.com
|
| Whois Server Version 1.3
|
| Domain names in the .com, .net, and .org domains can now be registered
| with many different competing registrars. Go to http://www.internic.net
| for detailed information.
|
| Server Name: MICROSOFT.COM.IS.SECRETLY.RUN.BY.ILLUMINATI.TERRORISTS.NET
| IP Address: 170.1.75.143
| Registrar: NETWORK SOLUTIONS, INC.
| Whois Server: whois.networksolutions.com
| Referral URL: www.networksolutions.com

Doesn't seem like anything malicious has been done yet.

Actually, I don't even know what those 'Server Name' and 'IP Address'
entries are for. Most domains don't seem to have them.

Same for apple.com:

| devo: gerald> whois apple.com
|
| Whois Server Version 1.3
|
| Domain names in the .com, .net, and .org domains can now be registered
| with many different competing registrars. Go to http://www.internic.net
| for detailed information.
|
| Server Name: APPLE.COM.IS.THE.CHOICE.OF.ALL.SELF.RESPECTING.TERRORISTS.NET
| IP Address: 170.1.75.144
| Registrar: NETWORK SOLUTIONS, INC.
| Whois Server: whois.networksolutions.com
| Referral URL: www.networksolutions.com

And aol.com:

| devo: gerald> whois aol.com
|
| Whois Server Version 1.3
|
| Domain names in the .com, .net, and .org domains can now be registered
| with many different competing registrars. Go to http://www.internic.net
| for detailed information.
|
| Server Name: AOL.COM.KCAUTOWEB.COM
| IP Address: 171.218.19.17
| Registrar: TUCOWS.COM, INC.
| Whois Server: whois.opensrs.net
| Referral URL: www.opensrs.org
|
| Server Name: AOL.COM.IS.REGULARLY.HAX0RED.BY.INSIDE-AOL.COM
| IP Address: 170.1.75.140
| Registrar: NETWORK SOLUTIONS, INC.
| Whois Server: whois.networksolutions.com
| Referral URL: www.networksolutions.com
|
| Server Name: AOL.COM.EATMYSHIT.ORG
| IP Address: 207.207.198.11
| Registrar: TUCOWS.COM, INC.
| Whois Server: whois.opensrs.net
| Referral URL: www.opensrs.org
:

Looks like AOL has entries in a bunch of different registrars,
and only a few of them have been altered? (maybe it's just a
harmless addition to the registrar entry or something, and not
any kind of hijacking.)

| devo: gerald> whois terrorists.net
|
| Whois Server Version 1.3
|
| Domain names in the .com, .net, and .org domains can now be registered
| with many different competing registrars. Go to http://www.internic.net
| for detailed information.
|
| Domain Name: TERRORISTS.NET
| Registrar: NETWORK SOLUTIONS, INC.
| Whois Server: whois.networksolutions.com
| Referral URL: www.networksolutions.com
| Name Server: NS1.HYPERMART.NET
| Name Server: NS2.HYPERMART.NET
| Name Server: DARKLORD.DARKTHRONE.COM
| Updated Date: 12-aug-2000
|
| [...]
|
| Registrant:
| NEO (TERRORISTS8-DOM)
| Paul Ouderkirk 1904-1380 Prince of Wales
| Dr.
| Ottawa, Ontario K2C 3N5
| CA
|
| Domain Name: TERRORISTS.NET

Hmm... Ottawa, eh?

(not that they necessarily had anything to do with it)

--
Gerald Oskoboiny <[email protected]>
http://impressive.net/people/gerald/