From owner-freebsd-security@FreeBSD.ORG  Tue Dec 18 17:08:56 2007
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id CDF4A16A46B
	for <freebsd-security@freebsd.org>;
	Tue, 18 Dec 2007 17:08:56 +0000 (UTC)
	(envelope-from jerry@syslog.org)
Received: from www2.stelesys.com (www2.stelesys.com [69.61.61.170])
	by mx1.freebsd.org (Postfix) with ESMTP id 9243F13C4E3
	for <freebsd-security@freebsd.org>;
	Tue, 18 Dec 2007 17:08:56 +0000 (UTC)
	(envelope-from jerry@syslog.org)
Received: from [127.0.0.1] (helo=www.stelesys.com)
	by www2.stelesys.com with esmtpa (Exim 4.68 (FreeBSD))
	(envelope-from <jerry@syslog.org>)
	id 1J4fQ9-0003e2-0Y; Tue, 18 Dec 2007 11:35:53 -0500
Received: from 209.134.164.18 ([209.134.164.18])
	(SquirrelMail authenticated user jerry@syslog.org)
	by www.stelesys.com with HTTP; Tue, 18 Dec 2007 11:35:53 -0500 (EST)
Message-ID: <1504.209.134.164.18.1197995753.squirrel@www.stelesys.com>
In-Reply-To: <bcd996c30712180752t3fb767efm4b059d435ee40190@mail.gmail.com>
References: <bcd996c30712180752t3fb767efm4b059d435ee40190@mail.gmail.com>
Date: Tue, 18 Dec 2007 11:35:53 -0500 (EST)
From: jerry@syslog.org
To: "Anjang Aki" <mailman.msc@gmail.com>
User-Agent: SquirrelMail/1.4.9a
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
X-AntiAbuse: This header was added to track abuse,
	please include it with any abuse report
X-AntiAbuse: Primary Hostname - www2.stelesys.com
X-AntiAbuse: Original Domain - freebsd.org
X-AntiAbuse: Originator/Caller UID/GID - [26 6] / [26 6]
X-AntiAbuse: Sender Address Domain - syslog.org
Cc: freebsd-security@freebsd.org
Subject: Re: Google DNS hacked?
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Security issues \[members-only posting\]"
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 18 Dec 2007 17:08:56 -0000

That comes around every now and then.  It has to do with the way that the
whois databse is searched, so it's relatively easy to get a record on the
list.  If you look carefully, you will see that google.com is at the front
of the domain:
GOOGLE.COM.ZOMBIED.AND.HACKED.BY.WWW.WEB-HACK.COM

There are many domains picked on - take a look at microsoft.com as well.

Jerry
http://www.syslog.org
> Hi! all,
>
> I dont have any idea how to contact google but if any of you know how
> to or if is there google staff here they might want to know about
> this:
> http://img443.imageshack.us/img443/2903/googlewhoislolliif6.png
>
> i found this while whoising google.com domain
>
> sorry if i had posted wrongly here
>
> regards
>
> --
> -- Anjang Aki --
> _______________________________________________
> freebsd-security@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-security
> To unsubscribe, send any mail to
> "freebsd-security-unsubscribe@freebsd.org"
>