Verisign - getting all typo and expired domain traffic?
 

Verisign has started adding wildcard records to the .net and .com zones. So any mistyped .com or .net domain (that doesn't exist) will go to a Verisign page.

Did anybody else notice this?

Here's an example...
http://www.gofuckyourselfs.com/

.net is complete, .com should be complete soon, appears to be working some places, others not yet.

welcome to verisign hell.
:ak47:

Yeah, VeriSign has control...sucks.

They use overture search results ...

What verisign has done breaks a multitude of things.

1. Made network troubleshooting a much more interesting task.

2. Broke mail servers that do reverse lookups on incoming mail to verify the sending domain exists.

3. Breaks secondary mail servers if there are typo's in the primary mx records. (the mail ends up at verisign and is bounced. I would go to the secondary mail server for processing with out verisign hijacking the unregistered domains)


---
"failure is not an option. It comes bundled with Windows."

Ian G.

un-fucking-believable

Verisign/Network Solutions are now the ultimate typo-squatters
http://www.microsfot.net

A lawsuit waiting to happen

yes,for sure something is coming up after this


i noticed it too earlier today

maybe they can get away with this since they have a link to microsoft?

and by the way, how are they registering all these domains? does it cost any money to them?

damn i thought i had spyware hijacking my browser or sumthin, then i saw it was verisign

weak

maybe they are using them as some kind of 404 type thing, where you can still buy the domain but in the meantime they are gonna profit. pretty fucked if you ask me, im sure this isn't the last we'll hear.

they have domains that are not registered at all

wtf

I just noticed this today

Confused me like a mofo.

time to invest in verisign stocks? lol

they have control of dns zones and they send it to their site as 404. This is historical date for the internet. Major change......

first reactions

http://news.google.co.uk/news?q=veri...sa=N&scoring=d

from http://www.betanews.com/article.php3?sid=1063691303

"redirecting all nonexistent Web addresses, as well as those without valid DNS entries, to a VeriSign search page."

so if your unused domains have wrong DNS entries they hijack it

Now the dyslexics can't even rely on a "Domain not found" to know when they are spelling something wrong.

shit's gonna hit the fan i bet

the people making decisions at that joint are so fuckin' shady...

Or short them.. if they are even shortable anymore.

Lawsuit waiting to happen.

raising cash to pay sex.com?

VeriSign has partnered with Overture to handle Site Finder search results, although the company has not said how much it expects to make from the deal.

their stock started going up

the news are very fresh. If you buy stocks it's like free money now.

rr.com has null routed the IP they are using to land all those on.

way to go.

and whoever started this thread... apparently verisign only takes the web traffic, they have no MX entries in the dns zones for all of those, so it really doesnt effect mail for expired/unregistered domains.

We didn't find: "www.gofuckyourselfs.com"
There is no Web site at this address.

http://www.cbronline.com/latestnews/...256d9c0018be8b

"It's difficult to determine exactly how much revenue VeriSign could create. Back-of-the-envelope calculations suggest that VeriSign could create revenue of $1m per day for itself and partners if it could convert 0.3% of its error messages into paid clicks.

That's based on estimates (from Afilias's Mohan) that VeriSign's .com and .net registry returns about 800 million error messages a day, and the average pay-per-click of $0.40 reported by paid search leader Overture Services Inc in the second quarter 2003."

woah, that is some crazy shit. bump !

Everybody say make money money make money money money

holy shit..

That is totally fucked up.

They are gonna get sued into extinction. And good riddance. :feels-hot

they're very tough. I am sure they get away with this


It seems they are not redirecting anything adult related (for now)

Ahahaha, look at the title...

http://www.theregister.co.uk/content/6/32852.html

Someone is going to get rich

Very rich

Very quick

that's some fucked up shit

I think admins around the world should unite and block verisign.com :thumbsup

Versign is Wildcarding .com and .net.

You used to be able to do something like this before Verisign steped in. The best way to describe it is in a geeky conversation..

Client Machine (looking for www.gofuckyourself.com) : Hello ns1.gofuckyourself.com, do you happen to know where www.gofuckyourself.com is?

Server (ns1.gofuckyourself.com): Well yes i do! Its at 64.88.blah.blah. Hey, while your here, did you know that I can also resolve any domains for . ? Pretty cool huh?

Client Machine : Wow. Ill remember that. Thanks.

End of conversation.

Anyhow, when the client doesnt get a response from its primary NS, it now remembers "Fuck, ns1.gofuckyourself.com might be able to help out". So it asks ns1.gfy and it ALWAYS responds "Yep, micr0s0ft.com resolves to 64.64.55.11". Now ns1.gfy has control of all your type ins.

Ive seen this work, one of my co-workers at another company I used to work for did this by accident. Fun until people complain :)

Im pretty sure noone will understand what im rumbling on about, but I feel good that I got this out of my system.

buying stock NOW!

SAME... even though I hate the damn company :1orglaugh

Verisign has been doing stuff like this since the early days. Always looking for a way to take advantage.

:BangBang:

Yes, this was possible.
But only on people running a certain broken version of the Windows NT domain server.

So most ISP users were not affected.

bumping again, tis a hot issue

Verisign is a BAD compagny :)

verisign is such a shitty company. Anyone remember when they were sending fake renewal notices to hi-jack domains?

http://www.gofuckyourself.com/showth...ghlight=domain

Most people use the DNS servers which was given to them by their provider, arn't those providers able to change/block this?

At my provider I still get the standard NO DNS error when I type a non existent domain name.

I've been reading a few different ISP mailing lists, some of them are already making slight code changes to their DNS cache daemons to convert the Verisign IP into the correct "no domain exists" response.

Heh heh, you can poison the text used on their page by changing some data in the URL...

http://sitefinder.verisign.com/lpc?u...0cock%3C/h1%3E

fucked up.

up 3.74% today already
not bad


too bad i'm not into stocks (yet)

a good argument would describ how this is actually copyright infingment