screw verisign
angry that the company given the right to manage the dot-com set of
domains, Verisign, has decided to take a piss in the
pool?. That's right, the folks given the very solemn repsonsibility for
administering a core piece of the internet have decided to use the tricks of
spammers and thieves to make a quick and dirty buck - and help out the spammers
to boot by giving them a free ride on every dot-com domain that doesn't exist.
And a lot of mail servers will try to send the spam back to them and they will
just reject it, which means that the skulking bastards KNEW that they'd be
putting more of a spam load on the entire internet.
The gist is that if you look for a domain that doesn't exist, they'll happily
tell you it
does and send you there, e.g. type
http://www.verisignaredirtyscumsuckingpigs.com
into your browser and you'll get to their typosquatting service. This is pure
evil on many levels and they should really get kicked squarely in the crotch a
few thousand times for thinking they can get away with this.
Fortunately, people around the internet are cooking up ways to
stop this. Call up your isp, or send them an email to abuse@yourisp.com
and complain that these guys broke your internet.
Here's something interesting: run a portscan against them and they will
temporarily BLOCK you from accessing the IP (currently 64.94.110.11). So I
say, do agressive scanning and get yourselve blocked. That's a legitimate way
to protect yourself and your servers, and it has the added benefit of adding
lots of load onto them as well.
Oh, and this is a broken image that points to the non-existant domain above so
that every time this page is viewed it will cause them to get more useless
traffic:
And here's the scan I ran against them:
Starting nmap 3.30 ( http://www.insecure.org/nmap/ ) at 2003-09-17 14:26 EDT
Host sitefinder-idn.verisign.com (64.94.110.11) appears to be up ... good.
Initiating Connect() Scan against sitefinder-idn.verisign.com (64.94.110.11) at 14:26
Adding open port 25/tcp
Adding open port 80/tcp
The Connect() Scan took 18 seconds to scan 1644 ports.
For OSScan assuming that port 25 is open and port 1 is closed and neither are firewalled
For OSScan assuming that port 25 is open and port 1 is closed and neither are firewalled
For OSScan assuming that port 25 is open and port 1 is closed and neither are firewalled
Interesting ports on sitefinder-idn.verisign.com (64.94.110.11):
(The 1636 ports scanned but not shown below are in state: closed)
Port State Service
23/tcp filtered telnet
25/tcp open smtp
67/tcp filtered dhcpserver
79/tcp filtered finger
80/tcp open http
161/tcp filtered snmp
162/tcp filtered snmptrap
514/tcp filtered shell
Device type: broadband router|general purpose|router
Running (JUST GUESSING) : Draytek embedded (96%), Siemens embedded (93%), Linux
2.4.X|2.5.X (93%), FreeSCO Linux 2.0.X (93%)
Aggressive OS guesses: Draytek Vigor 2200e DSL router v2.1b (96%), Siemens
Speedstream 2602 DSL/Cable router (93%), Microsoft Xbox running Debian Linux
2.4.20 (93%), FreeSCO 0.27 (Linux kernel 2.0.38) (93%), Linux kernel 2.2.16
(93%), Linux kernel 2.4.18 (x86) (93%), Linux kernel 2.4.20 (93%), Linux kernel
2.4.19 (X86) (87%), Linux Kernel 2.4.0 - 2.5.20 (87%), Linux Kernel 2.4.18 -
2.5.70 (X86) (87%)
No exact OS matches for host (test conditions non-ideal).
TCP Sequence Prediction: Class=truly random
Difficulty=9999999 (Good luck!)
IPID Sequence Generation: All zeros
Nmap run completed -- 1 IP address (1 host up) scanned in 39.607 seconds