Google's sitemap.org Got Hacked?

,
sitemap org Google Chrome screeshot 2012-08-12
screenshot of 〔http://sitemap.org/〕 on

Tsk tsk. Slap Google.

It turns out, the correct site is sitemaps.org. (notice the s, plural ). The interesting thing is that the fake site is registered using Google's address and phone number.

Here's analysis from Rob Shinn:

UPDATE: sitemap.org is just a squatter, I think. The site is actually sitemaps.org, but Google's information was used to register the domain sitemap.org. Again, see https://plus.google.com/u/0/112757647855302148298/posts/VfVPuqxcQVv (+Xah Lee's original post) for my original DNS analysis.

Looks like the DNS got taken over.
$ whois sitemap.org
[Querying whois.publicinterestregistry.net]
[whois.publicinterestregistry.net]
-snip-
Domain ID:D87779784-LROR
Domain Name:SITEMAP.ORG
Created On:22-Jun-2002 16:47:27 UTC
Last Updated On:  *21-May-2012 09:22:08 UTC*
Expiration Date:22-Jun-2013 16:47:27 UTC
Sponsoring Registrar:MarkMonitor Inc. (R37-LROR)
Status:CLIENT DELETE PROHIBITED
Status:CLIENT TRANSFER PROHIBITED
Status:CLIENT UPDATE PROHIBITED
Registrant ID:mmr-32097
Registrant Name:DNS Admin
Registrant Organization:Google Inc.
Registrant Street1:1600 Amphitheatre Parkway
Registrant Street2:
Registrant Street3:
Registrant City:Mountain View
Registrant State/Province:CA
Registrant Postal Code:94043
Registrant Country:US
Registrant Phone:+1.6506234000
Registrant Phone Ext.:
Registrant FAX:+1.6506188571
Registrant FAX Ext.:
Registrant Email:dns-admin@google.com
Admin ID:mmr-32097
Admin Name:DNS Admin
Admin Organization:Google Inc.
Admin Street1:1600 Amphitheatre Parkway
Admin Street2:
Admin Street3:
Admin City:Mountain View
Admin State/Province:CA
Admin Postal Code:94043
Admin Country:US
Admin Phone:+1.6506234000
Admin Phone Ext.:
Admin FAX:+1.6506188571
Admin FAX Ext.:
Admin Email:dns-admin@google.com
Tech ID:mmr-32097
Tech Name:DNS Admin
Tech Organization:Google Inc.
Tech Street1:1600 Amphitheatre Parkway
Tech Street2:
Tech Street3:
Tech City:Mountain View
Tech State/Province:CA
Tech Postal Code:94043
Tech Country:US
Tech Phone:+1.6506234000
Tech Phone Ext.:
Tech FAX:+1.6506188571
Tech FAX Ext.:
Tech Email:dns-admin@google.com
Name Server: NS2.TERA-BYTE.COM
Name Server: NS1.TERA-BYTE.COM
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
DNSSEC:Unsigned

$ nslookup sitemap.org
Server:	 127.0.0.1
Address:	127.0.0.1#53

Non-authoritative answer:
Name:	sitemap.org
Address: 216.194.68.49

$ whois 216.194.68.49
[Querying whois.arin.net]
[Redirected to rwhois.tera-byte.com:4321]
[Querying rwhois.tera-byte.com]
[rwhois.tera-byte.com]
%rwhois V-1.5:003fff:00 rwhois.tera-byte.com (by Network Solutions, Inc. V-1.5.9.6)
network:Class-Name:network
network:Auth-Area:216.194.64.0/19 network:Network-Name:NET-216-194-68-1 network:IP-Network:216.194.68.1/24
network:Name;I:Tera-Byte Dot Com Inc.
network:Address-1;I:Terminal Level, 10004-104 Ave
network:Address-2;I:Edmonton, AB T5J0K1
network:Address-3;I:CA
network:Contact;I:hostmaster@tera-byte.com

$ nslookup sitemap.org 8.8.8.8
Server:	 8.8.8.8
Address:	8.8.8.8#53

Non-authoritative answer:
Name:	sitemap.org
Address: 216.194.68.49

$ nslookup sitemap.org 8.8.4.4
Server:	 8.8.4.4
Address:	8.8.4.4#53

Non-authoritative answer:
Name:	sitemap.org
Address: 216.194.68.49 
blog comments powered by Disqus