Terminal Whois Lookup

Question

Level 1

109 points

Terminal Whois Lookup

Hi folks.

Can anybody tell me whose database is used for whois lookups using whois =domain.com in the Terminal? They are carrying a bad record that's 8 years out of date for my domain, and I'd like to have them erase it.

I spoke to my registrar, and they do not have the record in their database. And yes, the whois database should have been updated, but it hasn't been. I'd like to chase it up.

Internic (Verisign) says it isn't in their database. Godaddy says it isn't in their database. I don't know who else to ask.

Any help appreciated. Thanks

G5 1.8, Blackbook 2.0, Mac Pro 2.8 (8c), iMac 17 2.0, Touch2, Shuffle2, iPod40, Mac OS X (10.6.1), iPhone? Heck I'm still giggly about MultiFinder!

Posted on Oct 21, 2009 2:22 PM

Reply

Answer 1

Camelot

Level 9

58,197 points

Oct 21, 2009 8:44 PM in response to BioRich

Can anybody tell me whose database is used for whois lookups using whois =domain.com in the Terminal?

Not without knowing the domain name you're querying.

From man whois:

By default whois constructs the name of a whois server to use
from the top-level domain (TLD) of the supplied (single) argu-
ment, and appending ".whois-servers.net". This effectively
allows a suitable whois server to be selected automatically for a
large number of TLDs.

In the case of .com and .net this likely maps to Verisign. .org maps to publicinterestregistry.net, .co.uk maps to Nominet, etc., etc...

Reply

Answer 2

BioRich Author

Level 1

109 points

Oct 22, 2009 1:05 AM in response to Camelot

pints.com

verisign (their feedback is internic.net) says it ain't from them. I've spoken to both of them to no end, and neither say it's on their end, which is why they told me to ask whose database is reporting this.

pints.com reports 2 entities, the 205.207 end being about 8 years old, 8 years out of date. It's plain wrong, cached somewhere, and bothering the crap out of me, as I've updated Godaddy ... about 7 times since those days?

Anybody have some insight?

Cheers

Reply

Answer 3

xnav

Level 5

7,113 points

Oct 22, 2009 8:00 AM in response to BioRich

A query from the internic web site only contains this:

Domain Name: PINTS.COM
Registrar: GODADDY.COM, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS18.ZONEEDIT.COM
Name Server: NS2.ZONEEDIT.COM
Status: clientDeleteProhibited
Status: clientRenewProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 17-sep-2009
Creation Date: 17-nov-1995
Expiration Date: 16-nov-2010

Is this the correct info?

Reply

Answer 4

BioRich Author

Level 1

109 points

Oct 22, 2009 8:29 AM in response to xnav

This is what I'm getting from my terminal:

Server Name: PINTS.COM
IP Address: 205.207.125.33
Registrar: GODADDY.COM, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com

Domain Name: PINTS.COM
Registrar: GODADDY.COM, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS18.ZONEEDIT.COM
Name Server: NS2.ZONEEDIT.COM
Status: clientDeleteProhibited
Status: clientRenewProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 17-sep-2009
Creation Date: 17-nov-1995
Expiration Date: 16-nov-2010

The 205.207 IP is about 8 years old and is wrong. I've been chasing it everywhere, and it's really driving me up the wall.

Reply

Answer 5

BioRich Author

Level 1

109 points

Oct 23, 2009 6:09 AM in response to dbsneddon

Yes the nameservers are at zoneedit.com. I'm the one who set them up. And no, it isn't zoneedit that has those records. Yes I have an account there. I only put in the relevant, updated information.

Why would someone not set up an account for their domains, then have the non-account have records that are 8 years out of date? Don't you think that I have checked both my DNS and registrar information that is supplied? There's a record cached by someone that's showing up here, and it's very old, very wrong, and very hard to find who it is. Internic says it's Godaddy, Godaddy says it's Internic. Zoneedit wasn't even used when this information was valid. Maybe 6 years in between there to be honest.

Reply

Answer 6

Oct 23, 2009 6:38 AM in response to BioRich

BioRich wrote:
Internic says it's Godaddy, Godaddy says it's Internic.

I think whois could be using whois.crsnic.net. If I query like this:

whois -h whois.crsnic.net =pints.com

I get the same information as when I don't specify the whois server. However, if just take a wild guess and try GoDaddy:

whois -h whois.godaddy.com pints.com

I get different results, suggesting that it probably isn't cached at GoDaddy. Specifying whois.internic.net gives the same result as whois.crsnic.net.

But I'm kind of guessing here, so keep that in mind.

charlie

Reply

Answer 7

BioRich Author

Level 1

109 points

Oct 23, 2009 7:16 AM in response to Charles Minow

It's cached somewhere, and I'm trying to figure out who has it.

Internic (Verisign) has it, crsnic has it, Godaddy has the updated real version.

Expanded version of Internic also brings back that bad info. Network Utility does the same.

I spoke at length with Internic folks, and they said it wasn't there. I might email them back again. They told me to speak to Godaddy. So I did. Godaddy has denied it, and trying again.

Reply