Detecting parked domains

Duane Wessels wessels at packet-pushers.com
Thu Aug 3 16:01:55 UTC 2006


On Thu, 3 Aug 2006, Joe Abley said:

> Do you have an example of a parked domain with no SOA record?

eoileon.com
tri-cityhearald.com


> Surely for that to work for most of the domains we're talking about, the 
> parking companies would need to be able to insert arbitrary records into 
> zones such as "ORG", "NET" and "COM", which isn't something that any of the 
> registries for those zones permit.

No, they just make up their own COM zone.

For example, the nameservers for eoileon.com are:

;; AUTHORITY SECTION:
eoileon.com.            145225  IN      NS      ns1.chestertonholdings.com.
eoileon.com.            145225  IN      NS      ns11.chestertonholdings.com.

If I ask one of their auth nameservers about COM I get:

$ dig +short @ns1.chestertonholdings.com com soa
a.gtld-servers.net. nstld.verisign-grs.com. 2006021701 3600 900 1209600 21600

Which almost looks good, except they didn't get the email about Verisign's
serial format change.

$ dig +short com soa
a.gtld-servers.net. nstld.verisign-grs.com. 1154620024 1800 900 604800 900

Duane W.





More information about the NANOG mailing list