Re: Adobe.com domain name hijacked

Replies:

  • None.

Parents:

On Thu, Oct 19, 2000 at 03:54:53PM -0400, Gerald Oskoboiny wrote:
> http://it.fairfax.com.au/breaking/20001019/A61112-2000Oct19.html

> > A Chinese resident has taken the adobe.com domain name away from
> > imaging software company Adobe Systems.
>
> cf. webtechs.com snafu from last year:
> http://www.w3.org/People/Connolly/9903webtechs-snafu.html
>
> Nice to see it happen to a large company! This should make it
> into mainstream press soon. (though it's not clear to me yet
> who's at fault in this case)

Still hasn't shown up on news.com or wired.com... strange.
(adobe.com seems to be back in Adobe's control now.)

Meanwhile, microsoft.com has been hijacked, or something:

| devo: gerald> whois microsoft.com
|
| Whois Server Version 1.3
|
| Domain names in the .com, .net, and .org domains can now be registered
| with many different competing registrars. Go to http://www.internic.net
| for detailed information.
|
|    Server Name: MICROSOFT.COM.IS.SECRETLY.RUN.BY.ILLUMINATI.TERRORISTS.NET
|    IP Address: 170.1.75.143
|    Registrar: NETWORK SOLUTIONS, INC.
|    Whois Server: whois.networksolutions.com
|    Referral URL: www.networksolutions.com

Doesn't seem like anything malicious has been done yet.

Actually, I don't even know what those 'Server Name' and 'IP Address'
entries are for. Most domains don't seem to have them.

Same for apple.com:

| devo: gerald> whois apple.com
|
| Whois Server Version 1.3
|
| Domain names in the .com, .net, and .org domains can now be registered
| with many different competing registrars. Go to http://www.internic.net
| for detailed information.
|
|    Server Name: APPLE.COM.IS.THE.CHOICE.OF.ALL.SELF.RESPECTING.TERRORISTS.NET
|    IP Address: 170.1.75.144
|    Registrar: NETWORK SOLUTIONS, INC.
|    Whois Server: whois.networksolutions.com
|    Referral URL: www.networksolutions.com

And aol.com:

| devo: gerald> whois aol.com
|
| Whois Server Version 1.3
|
| Domain names in the .com, .net, and .org domains can now be registered
| with many different competing registrars. Go to http://www.internic.net
| for detailed information.
|
|    Server Name: AOL.COM.KCAUTOWEB.COM
|    IP Address: 171.218.19.17
|    Registrar: TUCOWS.COM, INC.
|    Whois Server: whois.opensrs.net
|    Referral URL: www.opensrs.org
|
|    Server Name: AOL.COM.IS.REGULARLY.HAX0RED.BY.INSIDE-AOL.COM
|    IP Address: 170.1.75.140
|    Registrar: NETWORK SOLUTIONS, INC.
|    Whois Server: whois.networksolutions.com
|    Referral URL: www.networksolutions.com
|
|    Server Name: AOL.COM.EATMYSHIT.ORG
|    IP Address: 207.207.198.11
|    Registrar: TUCOWS.COM, INC.
|    Whois Server: whois.opensrs.net
|    Referral URL: www.opensrs.org
:

Looks like AOL has entries in a bunch of different registrars,
and only a few of them have been altered? (maybe it's just a
harmless addition to the registrar entry or something, and not
any kind of hijacking.)

| devo: gerald> whois terrorists.net
|
| Whois Server Version 1.3
|
| Domain names in the .com, .net, and .org domains can now be registered
| with many different competing registrars. Go to http://www.internic.net
| for detailed information.
|
|    Domain Name: TERRORISTS.NET
|    Registrar: NETWORK SOLUTIONS, INC.
|    Whois Server: whois.networksolutions.com
|    Referral URL: www.networksolutions.com
|    Name Server: NS1.HYPERMART.NET
|    Name Server: NS2.HYPERMART.NET
|    Name Server: DARKLORD.DARKTHRONE.COM
|    Updated Date: 12-aug-2000
|
| [...]
|
| Registrant:
| NEO (TERRORISTS8-DOM)
|    Paul Ouderkirk 1904-1380 Prince of Wales
|    Dr.
|    Ottawa, Ontario K2C 3N5
|    CA
|
|    Domain Name: TERRORISTS.NET

Hmm... Ottawa, eh?

(not that they necessarily had anything to do with it)

--
Gerald Oskoboiny <[email protected]>
http://impressive.net/people/gerald/

HURL: fogo mailing list archives, maintained by Gerald Oskoboiny