April 8, 2008

Network Solutions Hijacking Unassigned Sub-Domains

Duncan Riley

109 comments »

Network Solutions is hijacking unassigned sub domains and delivering link filled holding pages for hundreds of thousands of sites.

Win Betteridge runs GotGame.com and contacted TechCrunch with the details:

For instance, app.gotgame.com resolves to a Network Solutions page with text links, including “Poker Tournaments” and “Texas Holdem Games.” The same is true of any other unassigned sub-domain. We have spoken to customer service a few times about fixing this problem…

I don’t know if this is standard practice for a hosting company, but this strikes me as another case of Network Solutions unreasonably profiting at the expense of its customers.

According to a search on DomainTools there are 294,438 sites on the same Network Solutions IP address as GotGame.com. I ran a test on the sites listed (for free) by DomainTools and every single one had the same issue: unassigned domain names with link filled Network Solutions holding pages.

Yet another reason to not use Network Solutions.

nns1.jpg

  • Sphere It

Trackbacks/Pings (Trackback URL)

Comments

Holy heck this is shocking.

 
 

netsoldoesnt.gotgame.com bastards!

 

This may have SEO implications, too. It doesn’t return a 404, so Google’s going to treat it as intentional site contents - and they penalise for duplicate content.

 

Unbelievable is that this kind of schemes keeps showing up and nobody takes action to punish this guys. It’s simply amazing…

 

Bastards!

IMO, all their clients should sue them and ask for huge compensation.

 

unfreaking-believable, I want to sign up for an account just to be apart of the class-action.

 

Fuck Network Solutions.

If there is one company on the internet I would like to see die a painful death, it is them. Everything they do is horrible. I wish people would stop giving them money.

 

Genius! But preposterous! I can’t believe they would high jack sub domains. I haven’t been searching for domains on the major registrars for years for fear of them snapping them up and trying to resell at a premium. This is yet another terrible example of registrars misbehaving.

 

Network Solutions is the antithesis to “GOOD”, yes I mean “EVIL”. Every year they sink deeper into another layer of hell we never imagined.

NetSol, come on, get with it! The only reason you really exist today is from Legacy aspects - get a real business model and start treating people with respect.

jason

 

This is a great opportunity for other Domain Registrars! If I were them I’d post a copy of this post on my home page.

If you have a domain thats hosted by them, I’d switch……that will teach them.

 

That is ONLY if you are using their DNS for your domain, isn’t it? The only reason app.gotgame.com resolves to NetSol’s under construction page is because gotgame.com’s NS points to NetSol. Most registrars point your domain to their under construction pages after a new domain is registered…

Maybe there is a wildcard record that has not been removed from gotgame.com?

 

wow this is some bullshit. i am glad i do not use network solutions.

 

Sheesh… talk about desparation from a company. It’s about as bad as a company suing to generate revenue.

This kind of “catch all” A records should be against the rights that you received when you signed up with network solutions. Something tells me you can set a catch all that would stop this junk.

just my .02

 

Isn’t there an HTACCESS trick to avoid this?

RewriteEngine on
RewriteCond %{HTTP_HOST}!^www\.example\.com [NC]
RewriteRule (.*) http://www.example.com/1 [R=301,L]

You would lose however your subdomains unless you create more conditions, and this will only work with Apache (which statistically most of us seem to be using anyways).

[citation_needed]? http://www.webmasterworld.com/forum92/3511.htm Over by the fourth post!

IF this gets tested by those who are using network solutions, please let the rest of us know posting a comment here somewhere!!!

 

lol - if you realize the opportunity, you’re genius.
if you didn’t, you spend your time blasting them - but it’s still rather wrong.

 

CLASS ACTION LAWSUIT…. this is total B.S. How funny would it be if someone started a site called networksolutionslawsuit.com and they used it to for their link farms? I hope someone does it.

 

coool,I like the good news

 

Scott is correct. This is a function of using NetSol for name servers, not just for domain registration.

 

Man oh man do I hate Network Solutions. I can’t believe I hate them more now than when I was a customer, but I do. Pure sleaze.

 

Ok, that’s not just uncalled for, that’s room for damages. I can attest to the fact that Google can and will ban websites for too many subdomains too fast, due to the subdomain spam attack back in 2006:

http://www.seo-scoop.com/2006/.....-all-week/

 

This happened to a popular environmental economics blog that I read that is hosted by Network Solutions. Network Solutions actually had the audacity to charge them $12 to redirect env-econ.net to http://www.env-econ.net. As a result of Network Solution’s shenanigans they got bumped from Google as a result (they were previously the #1 site when searching “environmental economics”) and they lost over half of their traffic.

http://www.env-econ.net/2008/01/google.html
http://www.env-econ.net/2008/0.....gle-n.html

 

After doing a bit of test (against other domains whose DNS are also set to NS97/NS98.WORLDNIC.COM), it appears that there is a wildcard record that returns the SAME IP address as your main domain.

Now, gotgame.com actually has its main domain hosted on NetSol’s hosting service. app.gotgame.com actually resolves to the same IP address (NetSol’s hosting service), but obviously the vhost on that web server is not configured to handle that host name, so it returns a default placeholder page — which happens to be NetSol’s under construction page.

Hijacking?! Looks like pretty standard practise from hosting companies. Anyway. At least people here are having fun kicking bashing their most hated companies.

 

Network Solutions is just plain dirty and no one that works there could claim to have morals. If they did they would be lying. I just wonder why people still pay them $35.00+ dollars a year for domain registrations, anyone that does is just burning money. Prestigious my A$$.

 
 

I work for Network Solutions and just wanted to post to say that I have escalated this . I will report back here as soon I have more info.

Shashi

 
 

True story.

When I was looking up domain names on Sunday April 6th, I saved a bunch of ones that were available to a notepad file, and so I am absolutely certain that the file was last modified April 6th 2008 and contains the name “powerscroll.com”—one of the names I thought I might be interested in. Now when I look it up again, it was registered April 6th! I had only been using two sites to look up names, register.com and bustaname.com so one of them is totally corrupt!

I’m not sure who to trust now..???!!!

 

@25 The bottom line is you can’t trust any of them. Until ICANN steps in and starts punishing companies that do stuff like this, it’s like the wild west and registrars are going to keep pushing until someone pushes back…

Right now, no one is pushing back…

 

they also have a domain valuation tool which is supposed to tell how much a registered name is worth so you can enter a bid. They had such a messed up algorithms. They said a 6-letter .com site of a french person’s last name, with zero traffic and not even a site up, was worth over $25,000.

 

@23:

If this is real, at least NetSol is taking a look at blogs (i.e. the comcast post from a few days ago).

 

GoDaddy is trustworthy.

NS = Whore

 

If they are doing this to your domain, send them a bill. All sub domains are the legal property of the domain holder, not the registrar :)

cheers

 

It really shows NS’s character.

Here is a solution: set a DNS wildcard of all sub domains to your main domain (i.e. *.yourdomain.com) pointing to your website server and make sure that you have an alias set so that your web sever resolves those wildcard calls. Point your domain to the DNS of your provider and do it there if Network Solutions doesn’t let you set wild cards.

If you are hosting with NS… well I guess then it’s time to quit and go somewhere else ASAP.

 

I don’t use NS, and never will.

-Please check out my blog for ways to make money online
http://mikesmoneyclub.blogspot.com

 

I wonder why they would do such a thingy.

http://www.meetingflex.com/index.html
Web Meeting + Chat + User Management

 

All the people talking about how unethical it is to be giving NS your money, seeing as how it’s the spawn of all evil….?

I’ve been trying to move my domain registration for seven years.

Seven. Years.

Every single time, they come up with some new tactic to hold my domain for ransom. This time, it’s setting up “domain protect” as a feature (ha.), then telling me I can’t transfer because the domain is protected. When I go in to change it and take the unasked-for domain protection off the domain? It counts as a change in service, and they make me wait 60 days to transfer. During that 60 days, they just re-set domain protection, effectively rendering me completely powerless to transfer, due to, as they say, the ICANN rules of not letting a domain be transferred within 60 days of an account change.

I’m two seconds from a bazooka filled with chickens and a trip to their headquarters. I *hate* those people. Every last festering, stinking one of them.

 

GoDaddy was doing the same to my subdomains a while back. total bullshit.

 

This story does not surprise me. However, I am shocked at the number of tabs whoever took that screenshot has open.

 

I’m guessing that by noon tomorrow, they’ll come out with a statement saying it was some kind of server/programming error.

 

Netsol is owned by General Atlantic Partners
http://www.generalatlantic.com.....efault.asp

They own a boatload of net companies. Private equity without a conscience.

Some junior associate with a stupid idea brought this to the table. He’ll get a big bonus this year.

Where is ICANN/ WIPO et al?

 

it’s about time for all netsol customers to file a class action and sue it’s ass off and shut it down for good. Jerks!

 

Well lately Roadrunner which is time warner’s cable internet provider now does hijacked domain style results pages with ads if you type a domain into the search bar and it doesn’t resolve.

So clearly they must be intercepting your search and paying enough attention to it to see if it resolves and then making money on putting up a page with ad links if it doesn’t.

 

Netsol is already an irrelevant company… it’s just a matter of time before others realize this and dump them for any of their hosting or domain related services!

Jon
http://woodmarvels.com - Create Unique Memories!

 

If your domain is using the NS nameserver, add a wildcard “A” record so any subdomain will resolve to your website. *.domain.com

or stop using NS <- better solution

 

I noticed this with a similar domain hosting service provider answerable.com They are doing this for years.

 

It’s amazing watching these sleaze bags self destruct with one stupid stunt after another.

 

I think this is just a case of DNS misconfiguration. No one bothered to check before publishing, though, am I right?

 

this is cool…

“I’m two seconds from a bazooka filled with chickens and a trip to their headquarters.”

 

Is that legal? If you have a trademarked company name tied to your URL, can a company - especially a hosting company - just tag a sub-domain to what is legally yours??? This is starting to sound like a potential class law suit action in the the making. There must be some caveat in Network Solutions legalese and terms of service…but that small print is straight sh*t.

 

Great blog and definitely an important issue. I’m curious why TechCrunch hasn’t also stepped up to the plate and asked why Google runs a website at http://www.google.la as being for the country of Laos when this domain space has been licensed by LA Names Corporation since 2003 for the City of Los Angeles. Visit http://www.www.la for additional information. Google is intentionally trying to mislead the public by including the country name of Laos on its DOT-LA website and that’s okay. This issue has been mentioned on TechCrunch several times in various related blogs, however, I guess this isn’t important enough for TechCrunch to pursue…

 

This is not looking good for this company.

 

I made little investigation and found:

All links from this sub-domain lead to kolmic.com network which is not indexed by Google (banned?).
From November 2007 Kolmic traffic boosted to Top 1000 Alexa:
http://www.alexa.com/data/deta.....kolmic.com

 

You’d think with all the questionable things this company is doing they would have no users left.

 

Does anyone remember when Verisign did the exact same thing to all unregistered domains on the internet? A coincidence? Now that you know about the sub domain hijacking, do you think it is a coincidence? If you do think its a coincidence, do you remember that Verisign once fully owned Network Solutions and still owns 15 percent of the company today. Coincidence? I think not.

Both of these companies are shady, but unfortunately because Verisign maintains the registry and global DNS service they are entitled to a $6.00 commission for every single .com and .net domain; which effectively means that they’ll never go out of business. Since they’ll never go out of business I doubt that Network Solutions will either.

Oh, and thanks to Verisign, every .com and .net domain registration will go up about $0.42 this year because of their greed.

See this article about it: http://sedo.com/links/showhtml.php3?Id=1687

I really, really hate these two companies. I know better, but I still wish both of them would die a horrible business death. You know, like getting sued for so much that they have to shut their doors to pay the settlement. That would be nice. ;-)

 

This is exactly why I switched from Network Solutions to GoDaddy; GoDaddy’s got great customer service and they don’t try and rob me at gunpoint by hijacking my own domain name and threatening my brand.

 

What a total low life! Network solutions and Verisign - I’ll never do business with you guys

 

You just need to put a wildcard record in the DNS management. That’s like the second thing you do with almost any registrar you let handle your DNS.

Not sure what the issue is?

 

Bunch of thieves.. I have had some bad experiences with them as well. Including their http://www.namejet.com

 

Wow! I don’t understand why somebody still uses their services???

 

So you have a competitor site using Network Solutions? Simply submit tons of non-existent sub-domains that bring up these Network Solutions holder pages to Google as new sites and watch as thier entire domain drops out of Google Search results!

 

I noticed this only just yesterday- instead of going to http://www.census.gov I went to http://census.gov/

Which goes to the page you mention.

For some reason it bothers me more that it does this to some government agency.

 

These guys need to get sued.

 

I can confirm this is happening for reaganta.com - check out asdfasdfasdf.reaganta.com

 

My domains don’t have this problem. It may be one of those things people opted into without reading carefully.

 

Wow! I don’t understand why somebody still uses their services???

Well, why do some people still use Go Daddy despite their fare share of haters? :D

Folks, Shashi offered to check this out. Wait ’til then.

 

So Netsol should be paying us to register domains! What a bold move on their part.

I wonder how they decided to do this.

I’m sure there will be an investigation of some sort. NetSol just seems to do whatever they want.

I used then when it was the only game in town many many years ago. Now, why would you!

 

Duncan - can you please update your post to let everyone know the fix?

@34 (Peter) has the right solution — use a wildcard entry so any/all domain requests go to your web server.

This will help when others start googling this and are looking for the fix.

 

Man, what a bunch of kooks. I agree with #66, pay us to register our own sub-domains!

 

Come on, people. Network Solutions is big and slow and probably the LAST registrar to do this - not the first.

Call it evil if you like, but every registrar does this. GoDaddy has been doing it for much longer than these guys. If you don’t want your domains pointed to their parked pages, THERE IS A CHECKBOX in the Network Solutions account manager!

I’ve never known a company that inspires more misdirected passion than Network Solutions.

 

Wow, I really didn’t think NetSol could get any worse… they truly are world-class scumbags!

 

This guy set up a wildcard CNAME, but didn’t set up anything for it to point to, so of course network solutions is showing the same parked page they would for any parked domain without a page.

 

GETS WORSE: I did a WHOIS search at netsol only to find two days later that they had “registered” the domain I searched and found available. So the only way to register it was through Network Solutions. Try it, you’ll see. IUse netsol’s WHOIS, if the domain your search is available and passes some possible netsol filter it’ll get registered by netsol.

 

I’ve never known a company that inspires more misdirected passion than Network Solutions.

That’s the way it is, Teddy, especially if some people don’t fully understand or even care about the devil in the details. And probably various, if not all, registrars do that when the domain name’s using their DNS. :)

The one in question here appears to be using Network Solutions’ hosting aside from their DNS. I can’t seem to find any CNAME records unless someone else can, nor can I find any A records pointing the domain name to another IP address other than the registrar’s.

 

Hi,

Just posting to let you know that this was brought to attention of the executive management and the issue should be addressed now.

Sorry for posting so late but didn’t have a chance to get to a computer till now as I am on vacation .

Shashi

 

Its no longer showing ads page & is returning a 404 page instead. Guess NetSol was trying if that ad thing would work out, eh! ;)

 

Network Solutions also hijack unassigned domains. WARNING: Do not use Network Solutions to search for a domain that you are interested in acquiring. They will hijack it and you will be unable to use another registration services such as GoDaddy to register it.

 

I am loving this “move to another provider” stuff… I, like a previous poster, have been trying to change to another provider for 4 years. We have business critical domains registered with them back in the late 90s before I joined the company. Because the individual who registered the domains on behalf of the company left 10 years ago and cannot personally authorise the transfer, even though he was simply the contact name given for the NS account and not the domains, NS refuse to allow me access to the account. They even changed the Whois data for the domain names to remove reference to the company name so that the domains now legally stand in the name of the ex-employee. The fact that all the contact details are 10 years out of date breaches their own terms and conditions and effectively ensures that no transfer away is possible. The only word for this is “criminal”.

 

There’s this mentality that uncharted legal territory is the Wild West with no rules whatsoever. This is a serious legal and business error. Reasonable effort must be made to be both ethical and moral. This is clearly theft or if there’s some sneaky language in the EUA then I’d say it’s fraud and in the weakest case it would be some sort of diminishment of brand or reputation, posting all those competitors ads. The general public is too internet savvy to have this go public without an outcry. If it goes public, heads will roll.

 

I had stopped using their service after getting a bad experience. Anyways a good option for registrar to make some extra money.

 

#78 Sarah,

Please send me an email and we can sort this out. My email is shashib at networksolutions.com. Most systems we have are usually to safeguard the domain registrants.

Shashi

 

Its no longer showing ads page & is returning a 404 page instead. Guess NetSol was trying if that ad thing would work out, eh!

Maybe, Amit. Then it’s also possible someone at the registrant’s end pulled a DNS fast one on them. :D

Also no longer pointing to any page whatever you type in before gotgame, so everything looks okay. Time to move along, folks, unless you insist on making an issue that might not necessarily be Network Solutions’ doing without being able to check further.

 

Fuck Network Solutions

 

A NetSol added 404 is still no good. It indicates that something ‘exists’ at that location when in reality the domain owner has never put something there.

 

now this is interesting.. no longer repro, just as what 82 said

 

Really, great information there. Last month I have faced new problem to all my domains. On every index pages and login pages, there are iframe codes which lead to IP address. I removed code from my websites manually and changed all ftp passwords. Since then its ok.

 

Thank you very much for bringing this information to our attention.

I left NetSol a long time ago, when they charged 100$ a year for a domain name… and I’m never going back, ever.

 

Network Solutions is preventing me from accessing Maria Sharapova’s official website ! … I can find no way of getting round it or accessing http://www.mariasharapova.com. without their page popping up. …

What’s more, once the Network Solutions page is up on my screen, nothing will get rid of it. It just refuses to close. …

As a total tech retard, this is completely beyond me. .. Is there anything at all I can do to get back to the tennis ???

Incidentally, I’ve never, to my knowledge, had anything to do with this company. Don’t know one end of a website from another .. so their offering me the Sharapova website domain name is very sweet of them, I’m sure, but I sort of think it already belongs to Sharapova’s team ! lol

 

Netsol’s tactics get even worse. When using a whois or “find a domain” on their site, they track the IP that the query came from and resolve it to a company. If the company is big enough (like microsoft), then they will reserve the queried domain, and jack up their price to acquire it. Then they’ll solicit whomever did the query with their price-gouging. Corporate Cyber-squatting.

 

Netsol doing such cheap hijacking business. They don’t do business in transparent way.

 

Regsiter.com also does this:

http://info.poets.net/

poets.net is an active website, and I DON’T appreciate this BS. It even has a popup!

 

Sorry, the comment form is closed at this time.