Forum Moderators: buckworks & webwork

Message Too Old, No Replies

I suspect a registar sells whois queries

         

moltar

10:03 pm on Mar 21, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



The other day I thought up a clever domain name. Two words joined. It isn't any major high paid keywords or anything like that. It's related to some music slang.

There is a CD compilation with the same name on the market from May 2005, so again, this is not big news or anything. Google returns 700 results for the query in quotes, 400 of those refer to the CD.

I checked the domain with WHOIS via a little perl script of my own. Results were returned via DirectNic's WHOIS serer. I hesitated for a few days before registering it. Today I decided to register it. What do you think? Of course, it is now registered (on 20th) and parked with ads and listed for sale.

Checking the whois info, it's registered with none other than DirectNic and parked using their DNS servers as well.

Anyways, I suspect that my whois query was sold, otherwise I don't see how a person could have guessed the same name on the same day. It's possible, but highly unprobable.

If you are interested in the domain name - pm me.

Webwork

11:23 pm on Mar 21, 2006 (gmt 0)

WebmasterWorld Administrator 10+ Year Member Top Contributors Of The Month



Though there's mounting anecdotal evidence for a "sniff and snatch" system no one, as yet, has offered compelling proof that alleged process occurs repeatedly. Typically, it's a 1 shot deal, where someone looks up a domain and shortly thereafter finds the domain to be registered, and then an inference is drawn.

I am offering an all expense paid trip for 2 to Elbonia to anyone who can conclusively sucker the alleged sniff-and-snatch player into registering 3 newly created domains in rapid order.

I am also offering an all expense paid trip for 8 to the person who can pull a fast one on the companies/individuals who test register domains for the purpose of rating traffic. It would likely involve a considerable number of proxy servers and an identity altering bot (effectively pretending to be a browser) that will be part of a system that identifies new "bulk registrations" and then repeatedly visits the new domains - thereby inducing the domain traffic tester to pay the full price for a few thousand domains. Or, at least, leaving the traffic testers a bit frustrated.

Moltar, what you may be seeing is a system that test registers domains that people do lookups on for the purpose of determining whether the whois check was a signal for a domain that has traffic.

Did you go back, after 5 days, to see if the domain is still registered?

[edited by: Webwork at 11:29 pm (utc) on Mar. 21, 2006]

Key_Master

11:27 pm on Mar 21, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



I'd take you up on your offer but I already spend enough time in a fantasy world. :)

moltar

11:49 pm on Mar 21, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Haha @ Webwork, that's quite a proposition. I was thinking of something along the same lines ;) I am pretty good with Perl, I can write up a bot in no time :))))

But ya, I did go back soon. I don't remember exactly when I thought up of the domain... a few days ago, not more than a week. And I actually WHOISed it several times (2 or 3). But I use my own Perl script to do that - it just displays whois without any other ad and upsell crap. But it does use other WHOIS servers to do lookups.

I went back today to register it. I thought it could be useful later on. And it was gone... I'll go back after 5 days and see if it was dropped by the registar.

What really confuses me even more is why on earth .org was also snatched by the same person, but .net wasn't. I don't remember looking up .org myself.

davezan

10:00 pm on Mar 22, 2006 (gmt 0)

10+ Year Member



Do the names "kenyatech" and "noldc" ring a bell? :D

(Somebody spank me for being naughty enough to mention those names, he he he...)

moltar

10:13 pm on Mar 22, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



It's the K word! I guess it's a common practice then, isn't it?

Added: I just searched the K word and found an interesting article that claims that K word = Directnic.com

They have their own network registrar and as such are allowed information about expiring domains, as well as first crack at registering them.

gpmgroup

11:42 pm on Mar 22, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



On the converse every day there are literally millions of new domains registered. So statistically a lot of names are going to be available one day and not the next.

1,660,915 .com's were registered today.

To put that in perspective there are only 1,342,693 .biz names and people have be registering those for 4 years

And there's only 65,000 words or so in the English language and most people don't know 25,000 of them. So that 1,660,915 new registrations today must have contained a few combos and made up words :)

moltar

12:09 am on Mar 23, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



gpmgroup: <snip>. I've done a fair bit of research up to now. If you look for the K word, you'll know what I am talking about.

It would be very onprobable to guess the name I was thinking. There are a lot more examples on another website of the domains that were grabbed after whois. Domains like:

a-very-long-and-totally-useless-domain-string-12345.com

If english has 65,000 words, then you can have so many 2 word combinations that my windows calculator froze while trying to calculate this....

65000! / ((65000-2)!*2!)

[edited by: Webwork at 12:33 am (utc) on Mar. 23, 2006]
[edit reason] Charter [webmasterworld.com] [/edit]

gpmgroup

12:26 am on Mar 23, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



I guess all registrars are not created equal, all the more reason to pick a good one.

The great thing about .info and .biz and now .org is their thick (central) registry so you can go to

www.whois.info
www.whois.biz
www.pir.org/whois_search/

moltar

12:52 am on Mar 23, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



I dont use DirectNIC as the registrar. And I didn't do a whois through their website. I did a whois via a homegrown script that uses Net::Whois::Raw Perl module which in turn uses whois.crsnic.net server for queries and automatically does recursive lookups if the domain was found and the details are located at a different registar.

But since the domain was not found, since it was not registered for the first time I did the WHOIS, then the script would not have done a recursive query. Thus the conclusion is that either whois.crsnic.net is selling the queries, or DirectNIC has some sort of way to get the queries from the other registars.

hexstar

12:50 am on Mar 30, 2006 (gmt 0)

10+ Year Member




Moltar wrote:
gpmgroup: <snip>. I've done a fair bit of research up to now. If you look for the K word, you'll know what I am talking about.

It would be very onprobable to guess the name I was thinking. There are a lot more examples on another website of the domains that were grabbed after whois. Domains like:

a-very-long-and-totally-useless-domain-string-12345.com

If english has 65,000 words, then you can have so many 2 word combinations that my windows calculator froze while trying to calculate this....

65000! / ((65000-2)!*2!)


According to quickmath.com the answer to that equation is 2112467500 :D