Yahoo Hacked?

Wed Mar 20 19:28:52 UTC 2002

The whois server has a really loose pattern matching engine.  This is 
actually a host record for:

JIMPHILLIPS.ORG
ACIDULOUS.COM
CANADIAN.ORG
COM.BR
SHEEPSTER.COM
SAFESEARCH.COM

The last one is what you are looking for - yahoo.com

This is becoming more and more common.  Look at microsoft.com, apple.com, etc.

At 06:17 PM 3/19/02, David McGaugh wrote:
>whois -h whois.internic.net yahoo.com
>
>Whois Server Version 1.3
>
>Domain names in the .com, .net, and .org domains can now be registered
>with many different competing registrars. Go to http://www.internic.net
>for detailed information.
>
>YAHOO.COM.REALLY.NEEDS.TO.GET.A.CLUE.AT.JIMPHILLIPS.ORG
>YAHOO.COM.IS.TRYING.TO.STEAL.YAHOO.VU.HOW.ACIDULOUS.COM
>YAHOO.COM.IS.NOT.CANADIAN.ORG
>YAHOO.COM.BR
>YAHOO.COM.AND.SAFESEARCH.COM.AINT.NOTHING.COMPARED.TO.SHEEPSTER.COM
>YAHOO.COM.AINT.NOTHIN.COMPARED.TO.SAFESEARCH.COM
>YAHOO.COM
>
>To single out one record, look it up with "xxx", where xxx is one of the
>of the records displayed above. If the records are the same, look them
>up
>with "=xxx" to receive a full display for each record.
>
> >>> Last update of whois database: Tue, 19 Mar 2002 17:10:53 EST <<<
>
>The Registry database contains ONLY .COM, .NET, .ORG, .EDU domains and
>Registrars.

----------------------------------------------------------------------
Brandon Handeland             Brandon at wyoming.com
Senior Network Engineer
wyoming.com NOC       (307) 857-1092
----------------------------------------------------------------------