weird whois entries for yahoo.com

David Ulevitch davidu at everydns.net
Sat Dec 8 17:06:15 UTC 2001


Hello nanog,

 This morning while troubleshooting some weird dns-poisoning issues I
 came across this:

> [root at scooby parked]# whois yahoo.com at whois.crsnic.net
> [whois.crsnic.net]
> 
> Whois Server Version 1.3
> 
> Domain names in the .com, .net, and .org domains can now be registered
> with many different competing registrars. Go to http://www.internic.net
> for detailed information.
> 
> YAHOO.COM.REALLY.NEEDS.TO.GET.A.CLUE.AT.JIMPHILLIPS.ORG
> YAHOO.COM.IS.TRYING.TO.STEAL.YAHOO.VU.HOW.ACIDULOUS.COM
> YAHOO.COM.AINT.NOTHIN.COMPARED.TO.SAFESEARCH.COM
> YAHOO.COM
> 
> To single out one record, look it up with "xxx", where xxx is one of the
> of the records displayed above. If the records are the same, look them up
> with "=xxx" to receive a full display for each record.
> 
>>>> Last update of whois database: Sat, 8 Dec 2001 05:13:13 EST <<<
> 
> The Registry database contains ONLY .COM, .NET, .ORG, .EDU domains and
> Registrars.
> 
> [root at scooby parked]# 

compared to this:

> [root at scooby parked]# whois yahoo.com at whois.networksolutions.com
> [whois.networksolutions.com]
> The Data in Network Solutions' WHOIS database is provided by Network
> Solutions for information purposes, and to assist persons in obtaining
> information about or related to a domain name registration record.
> Network Solutions does not guarantee its accuracy.  By submitting a
> WHOIS query, you agree that you will use this Data only for lawful
> purposes and that, under no circumstances will you use this Data to:
> (1) allow, enable, or otherwise support the transmission of mass
> unsolicited, commercial advertising or solicitations via e-mail
> (spam); or  (2) enable high volume, automated, electronic processes
> that apply to Network Solutions (or its systems).  Network Solutions
> reserves the right to modify these terms at any time.  By submitting
> this query, you agree to abide by this policy.
> 
> 
> Registrant:
> Yahoo (YAHOO-DOM)
>    701 First Avenue
>    Sunnyvale, CA 94089
>    US
> 
>    Domain Name: YAHOO.COM
> 
>    Administrative Contact, Technical Contact:
>       Administrator, Domain  (DA16065)  domainadmin at YAHOO-INC.COM
>       Yahoo! Inc.
>       701 First Avenue
>       Sunnyvale, CA  94089
>       US
>       1-408-530-5062
>    Billing Contact:
>       Billing, Domain  (DB28833)  domainbilling at YAHOO-INC.COM
>       Yahoo! Inc.
>       225 Broadway, 13th Floor
>       San Diego, CA 92101
>       1-408-731-3300
> 
>    Record last updated on 05-Oct-2001.
>    Record expires on 20-Jan-2010.
>    Record created on 18-Jan-1995.
>    Database last updated on 8-Dec-2001 00:50:00 EST.
> 
>    Domain servers in listed order:
> 
>    NS1.SNV.YAHOO.COM            216.115.108.33
>    NS2.SAN.YAHOO.COM            209.132.1.29
>    NS3.EUROPE.YAHOO.COM         217.12.4.71
>    NS4.DAL.YAHOO.COM            63.250.206.50
>    NS5.DCX.YAHOO.COM            216.32.74.10
> 
> [root at scooby parked]# 


Is this just someone at yahoo having fun with whois, or a more serious problem?
 
Thanks,
 David Ulevitch                       mailto:davidu at everydns.net
 EveryDNS.net                http://www.everydns.net





More information about the NANOG mailing list