Google Sitemap.org Domain Typosquatting Scam

By Xah Lee. Date:
sitemap org Google Chrome screeshot 2012-08-12
screenshot of [http://sitemap.org/] on 2012-08-12

Tsk tsk. Slap Google.

2012-08-12 It turns out, the correct site is [http://sitemaps.org/] . (notice the s, plural ). The interesting thing is that the fake site is registered using Google's address and phone number.

Here's analysis from [Rob Shinn https://plus.google.com/u/0/101972882215318886468/posts]:

UPDATE: sitemap.org is just a squatter, I think. The site is actually sitemaps.org, but Google's information was used to register the domain sitemap.org. Again, see https://plus.google.com/u/0/112757647855302148298/posts/VfVPuqxcQVv (+Xah Lee's original post) for my original DNS analysis.

Looks like the DNS got taken over.
$ whois sitemap.org
[Querying whois.publicinterestregistry.net]
[whois.publicinterestregistry.net]
-snip-
Domain ID:D87779784-LROR
Domain Name:SITEMAP.ORG
Created On:22-Jun-2002 16:47:27 UTC
Last Updated On:  *21-May-2012 09:22:08 UTC*
Expiration Date:22-Jun-2013 16:47:27 UTC
Sponsoring Registrar:MarkMonitor Inc. (R37-LROR)
Status:CLIENT DELETE PROHIBITED
Status:CLIENT TRANSFER PROHIBITED
Status:CLIENT UPDATE PROHIBITED
Registrant ID:mmr-32097
Registrant Name:DNS Admin
Registrant Organization:Google Inc.
Registrant Street1:1600 Amphitheatre Parkway
Registrant Street2:
Registrant Street3:
Registrant City:Mountain View
Registrant State/Province:CA
Registrant Postal Code:94043
Registrant Country:US
Registrant Phone:+1.6506234000
Registrant Phone Ext.:
Registrant FAX:+1.6506188571
Registrant FAX Ext.:
Registrant Email:dns-admin@google.com
Admin ID:mmr-32097
Admin Name:DNS Admin
Admin Organization:Google Inc.
Admin Street1:1600 Amphitheatre Parkway
Admin Street2:
Admin Street3:
Admin City:Mountain View
Admin State/Province:CA
Admin Postal Code:94043
Admin Country:US
Admin Phone:+1.6506234000
Admin Phone Ext.:
Admin FAX:+1.6506188571
Admin FAX Ext.:
Admin Email:dns-admin@google.com
Tech ID:mmr-32097
Tech Name:DNS Admin
Tech Organization:Google Inc.
Tech Street1:1600 Amphitheatre Parkway
Tech Street2:
Tech Street3:
Tech City:Mountain View
Tech State/Province:CA
Tech Postal Code:94043
Tech Country:US
Tech Phone:+1.6506234000
Tech Phone Ext.:
Tech FAX:+1.6506188571
Tech FAX Ext.:
Tech Email:dns-admin@google.com
Name Server: NS2.TERA-BYTE.COM
Name Server: NS1.TERA-BYTE.COM
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
DNSSEC:Unsigned

$ nslookup sitemap.org
Server:	 127.0.0.1
Address:	127.0.0.1#53

Non-authoritative answer:
Name:	sitemap.org
Address: 216.194.68.49

$ whois 216.194.68.49
[Querying whois.arin.net]
[Redirected to rwhois.tera-byte.com:4321]
[Querying rwhois.tera-byte.com]
[rwhois.tera-byte.com]
%rwhois V-1.5:003fff:00 rwhois.tera-byte.com (by Network Solutions, Inc. V-1.5.9.6)
network:Class-Name:network
network:Auth-Area:216.194.64.0/19 network:Network-Name:NET-216-194-68-1 network:IP-Network:216.194.68.1/24
network:Name;I:Tera-Byte Dot Com Inc.
network:Address-1;I:Terminal Level, 10004-104 Ave
network:Address-2;I:Edmonton, AB T5J0K1
network:Address-3;I:CA
network:Contact;I:hostmaster@tera-byte.com

$ nslookup sitemap.org 8.8.8.8
Server:	 8.8.8.8
Address:	8.8.8.8#53

Non-authoritative answer:
Name:	sitemap.org
Address: 216.194.68.49

$ nslookup sitemap.org 8.8.4.4
Server:	 8.8.4.4
Address:	8.8.4.4#53

Non-authoritative answer:
Name:	sitemap.org
Address: 216.194.68.49