20CN网络安全小组论坛 - 茶余饭后 - 是真是假：六位QQ不要要钱？ZT

论坛: 茶余饭后标题: 是真是假：六位QQ不要要钱？ZT

作者: tuzi [tuzi]

版主

近日以来，网上出现一种“赠送”免费6位QQ号码的网站，在网上各大论坛中，也都出现了类似这样的帖子:

http://www.tencent.cc/vip.htm?QQ=******
腾讯过大年，六位数的QQ不要要钱，点击马上申请！

是这样么？为了让大家了解这些事情背后的骗局，Nir做了一些调查。

我们就先从这个叫“tencent.cc”的网站入手。
首先，这个网站使用的是国际域名，其中的CC代表商业空间，而由于.CC属于新类型的域名，所以域名可用量(就是没

有被其他网站占用的域名量)非常大。
好，为了调查这个“tencent.cc”是不是腾讯科技（深圳）有限公司的网站，我们到全国比较大的一家ISP查找一下

tencent的域名。
具体的页面是 http://www.net.cn/static/domain/ ，我们选中了.com、.net、.cn、.cc，然后单击“查询”，显示

这些域名全都被注册了

http://panda.www.net.cn/cgi-bin/Check.cgi?domain=tencent&big5=n&com=yes&net=yes&cc=yes&cn=yes&x=13&y=4

已被注册的域名：
tencent.cn
tencent.com
tencent.net
tencent.cc

OK，那会不会因为tencent有钱，将所有的可用域名都注册了呢？我们接着看！

首先，我们来看看tencent.cn的相信信息，
http://panda.www.net.cn/cgi-bin/Check.cgi?domain=tencent&big5=n&com=yes&net=yes&cc=yes&cn=yes&x=13&y=4

结果如下

tencent.cn的详细信息：

Domain Name: tencent.cn
ROID: 20030311s10001s00038993-cn
Domain Status: inactive
Registrant Organization: 腾讯科技（深圳）有限公司
Registrant Name: 马化腾
Administrative Email: szponyma@public.szptt.net.cn
Sponsoring Registrar: 北京国政网科技发展有限公司
Registration Date: 2003-03-17 12:20
Expiration Date: 2006-03-17 12:48

看起来是腾讯的网站，可是我为何打不开呢？？

NEXT，tencent.com，呵呵，这个大家都知道是腾讯的正牌网站了，详细信息如下:
http://panda.www.net.cn/cgi-bin/Whois.cgi?domain=tencent&com=yes&work=whois&referer=http://www.net.cn/static/domain/

tencent.com的详细信息：

Whois Server Version 1.3

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.

Domain Name: TENCENT.COM
Registrar: NETWORK SOLUTIONS, LLC.
Whois Server: whois.networksolutions.com
Referral URL: http://www.networksolutions.com
Name Server: DNS1.IMOK.NET
Name Server: DNS2.IMOK.NET
Status: REGISTRAR-LOCK
Updated Date: 04-feb-2005
Creation Date: 14-sep-1998
Expiration Date: 13-sep-2010

>>> Last update of whois database: Tue, 8 Feb 2005 07:55:37 EST <<<

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar. Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability. VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.

[whois.networksolutions.com]
NOTICE AND TERMS OF USE: You are not authorized to access or query our WHOIS
database through the use of high-volume, automated, electronic processes. The
Data in Network Solutions' WHOIS database is provided by Network Solutions for information
purposes only, and to assist persons in obtaining information about or related
to a domain name registration record. Network Solutions does not guarantee its accuracy.
By submitting a WHOIS query, you agree to abide by the following terms of use:
You agree that you may use this Data only for lawful purposes and that under no
circumstances will you use this Data to: (1) allow, enable, or otherwise support
the transmission of mass unsolicited, commercial advertising or solicitations
via e-mail, telephone, or facsimile; or (2) enable high volume, automated,
electronic processes that apply to Network Solutions (or its computer systems). The
compilation, repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of Network Solutions. You agree not to use
high-volume, automated, electronic processes to access or query the WHOIS
database. Network Solutions reserves the right to terminate your access to the WHOIS
database in its sole discretion, including without limitation, for excessive
querying of the WHOIS database or for failure to otherwise abide by this policy.
Network Solutions reserves the right to modify these terms at any time.

Registrant:
Tencent Technology (Shenzhen) Company Ltd (TENCENT4-DOM)
10/F, Fiyta Building, Gaoxinnanyi Avenue
Southern District of Hi-tech Park
Shenzhen, Guang Dong 518057
CN

Domain Name: TENCENT.COM

Administrative Contact, Billing Contact:
Ma, Pony (PM9343) szponyma@public.szptt.net.cn
Tencent Technology (Shenzhen) Company Limited
10/F, Fiyta Building, Gaoxinnanyi Avenue
Southern District of Hi-tech Park
Shenzhen, Guangdong Province 518057
CN
86-755-86013388 fax: 86-755-86013399

Technical Contact:
Register.com (RI52-ORG) domain-registrar@REGISTER.COM
Register.com
575 8TH AVE FL 11
NEW YORK, NY 10018-3058
US
212-798-9200 fax: 212-629-9305

Record last updated on 07-Jul-2004.
Record expires on 13-Sep-2010.
Record created on 14-Sep-1998.
Database last updated on 8-Feb-2005 21:49:46 EST.

Domain servers in listed order:

DNS1.IMOK.NET 219.133.40.202
DNS2.IMOK.NET 61.152.100.5

The registry we were trying to contact could not be reached for your query.
The request timed out.

[HiChina format]
Domain Name ..................... TENCENT.COM
Name Server ..................... DNS1.IMOK.NET
DNS2.IMOK.NET
Registrant Organization ......... Tencent Technology //组织名称，腾讯科技
Registrant Address .............. 10/F, Fiyta Building, Gaoxinnanyi Avenue
Southern District of Hi-tech Park
Shenzhen, Guang Dong 518057
Registrant Country Code ......... Shenzhen, Guang Dong 518057 //呵呵，问:腾讯是哪里的公司呢？答:深圳！
Administrative Name ............. Ma, Pony
Administrative Address .......... Southern District of Hi-tech Park
Shenzhen, Guangdong Province 518057
CN
Administrative City ............. Shenzhen //看这个哦，管理人员的城市
Administrative Province/State ... Guangdong
Administrative Postal Code ...... Province 518057
Administrative Country Code ..... CN
Administrative Phone Number ..... 86-755-86013388 //呵呵，要是QQ出现问题，就打这个电话啊
Adminischutrative Fax .............. 86-755-86013399
Administrative Email ............ szponyma@public.szptt.net.cn
Billing Name .................... Ma, Pony
Billing Address ................. Southern District of Hi-tech Park
Shenzhen, Guangdong Province 518057
CN
Billing City .................... Shenzhen
Billing Province/State .......... Guangdong
Billing Postal Code ............. Province 518057
Billing Country Code ............ CN
Billing Phone Number ............ 86-755-86013388
Billing Fax ..................... 86-755-86013399
Billing Email ................... szponyma@public.szptt.net.cn
Technical Name .................. Register.com
Technical Organization .......... Register.com
Technical Address ............... 575 8TH AVE FL 11
NEW YORK, NY 10018-3058
US
Technical City .................. NEW YORK
Technical Province/State ........ NY
Technical Postal Code ........... 10018-3058
Technical Country Code .......... US
Technical Phone Number .......... 212-798-9200
Technical Fax ................... 212-629-9305
Technical Email ................. domain-registrar@REGISTER.COM
Expiration Date ................. 13-Sep-2010

呵呵，腾讯挺有钱，在Register.com注册的Domain。

好，继续NEXT，tencent.net
http://panda.www.net.cn/cgi-bin/Whois.cgi?domain=tencent&net=yes&work=whois&referer=http://www.net.cn/static/domain/

tencent.net的详细信息：

..................竟然没有~~~~~~~~~~~~~~，Nir打开IE看了看，的确，打不开页面。

好了，剩下的就是那个tencent.cc了，我们来看一看~~~~~

http://panda.www.net.cn/cgi-bin/Whois.cgi?domain=tencent&cc=yes&work=whois&referer=http://www.net.cn/static/domain/

tencent.cc的详细信息：

Whois Server Version 1.0

Domain names can now be registered with many different competing registrars.
Go to http://registrar.verisign-grs.com/whois/ for detailed information.

Domain Name: TENCENT.CC
Registrar: NETWORK SOLUTIONS, LLC.
Whois Server: whois.networksolutions.com
Referral URL: http://www.networksolutions.com
Name Server: NS5.CNMSN.NET
Name Server: NS6.CNMSN.NET
Status: CLIENT-XFER-PROHIBITED
Updated Date: 28-jan-2005
Creation Date: 28-jan-2005
Expiration Date: 28-jan-2006

>>> Last update of whois database: Tue, 8 Feb 2005 20:00:17 EST <<<

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the
expiration date of the domain name registrant's agreement with the
sponsoring registrar. Users may consult the sponsoring registrar's
Whois database to view the registrar's reported date of expiration
for this registration.

TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign's ("VeriSign") Whois
database is provided by VeriSign for information purposes only, and to
assist persons in obtaining information about or related to a domain name
registration record. VeriSign does not guarantee its accuracy.
By submitting a Whois query, you agree to abide by the following terms of
use: You agree that you may use this Data only for lawful purposes and that
under no circumstances will you use this Data to: (1) allow, enable, or
otherwise support the transmission of mass unsolicited, commercial
advertising or solicitations via e-mail, telephone, or facsimile; or
(2) enable high volume, automated, electronic processes that apply to
VeriSign (or its computer systems). The compilation, repackaging,
dissemination or other use of this Data is expressly prohibited without
the prior written consent of VeriSign. You agree not to use electronic
processes that are automated and high-volume to access or query the
Whois database except as reasonably necessary to register domain names
or modify existing registrations. VeriSign reserves the right to restrict
your access to the Whois database in its sole discretion to ensure
operational stability. VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.

The Registry database contains ONLY .bz, .cc and .tv domains and Registrars.

[whois.networksolutions.com]
NOTICE AND TERMS OF USE: You are not authorized to access or query our WHOIS
database through the use of high-volume, automated, electronic processes. The
Data in Network Solutions' WHOIS database is provided by Network Solutions for information
purposes only, and to assist persons in obtaining information about or related
to a domain name registration record. Network Solutions does not guarantee its accuracy.
By submitting a WHOIS query, you agree to abide by the following terms of use:
You agree that you may use this Data only for lawful purposes and that under no
circumstances will you use this Data to: (1) allow, enable, or otherwise support
the transmission of mass unsolicited, commercial advertising or solicitations
via e-mail, telephone, or facsimile; or (2) enable high volume, automated,
electronic processes that apply to Network Solutions (or its computer systems). The
compilation, repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of Network Solutions. You agree not to use
high-volume, automated, electronic processes to access or query the WHOIS
database. Network Solutions reserves the right to terminate your access to the WHOIS
database in its sole discretion, including without limitation, for excessive
querying of the WHOIS database or for failure to otherwise abide by this policy.
Network Solutions reserves the right to modify these terms at any time.

Registrant:
ttt (HECAZNRXDD)
ttt
nanjing, nanjing 300000
cn

Domain Name: TENCENT.CC

Administrative Contact:
ttt, ttt (39028927P) humanblue@263.net
ttt
nanjing, nanjing 300000
cn
66666666 fax: 66666666

Technical Contact:
ttt, ttt (39028928P) humanblue@263.net
ttt
nanjing, nanjing 300000
cn
66666666 fax: 66666666
Billing Contact:
XiaMen BizCn Computer & NetWork CO.,Ltd (OZNODZGPVO) domain@bizcn.com
1F - 4F,
Software Technology Service Builing,
Xiamen Software Park
XiaMen, FuJian 361004
CN
86-592-2577888 fax: 86-592-2577111

Record last updated on 28-Jan-2005.
Record expires on 28-Jan-2006.
Record created on 28-Jan-2005.
Database last updated on 8-Feb-2005 21:17:42 EST.

Domain servers in listed order:

NS5.CNMSN.NET 219.136.249.76
NS6.CNMSN.NET 61.233.40.142

[HiChina format]
Domain Name ..................... TENCENT.CC
Name Server ..................... NS5.CNMSN.NET
NS6.CNMSN.NET
Registrant Organization ......... ttt //TTT？？？听起来像炸药(TNT)，不过其实就是一个炸药，呵呵！
Registrant Address .............. ttt //还是TTT，没听过说中国还有TTT的地方！
nanjing, nanjing 300000 //这个我们知道了吧，南京呢！！腾讯搬了？
cn
Registrant City ................. nanjing
Registrant Province/State ....... nanjing
Registrant Postal Code .......... 300000
Registrant Country Code ......... cn
Administrative Name ............. ttt, ttt
Administrative Address .......... ttt
nanjing, nanjing 300000
cn
Administrative City ............. nanjing
Administrative Province/State ... nanjing
Administrative Postal Code ...... 300000
Administrative Country Code ..... cn
Administrative Phone Number ..... 66666666
Administrative Fax .............. 66666666
Administrative Email ............ humanblue@263.net //呵呵，可能只有这位仁兄能给一个说法了！！
Billing Name .................... XiaMen BizCn Computer & NetWork CO.,Ltd
Billing Address ................. Xiamen Software Park
XiaMen, FuJian 361004
CN
Billing City .................... XiaMen
Billing Province/State .......... FuJian
Billing Postal Code ............. 361004
Billing Country Code ............ CN
Billing Phone Number ............ 86-592-2577888
Billing Fax ..................... 86-592-2577111
Billing Email ................... domain@bizcn.com
Technical Name .................. ttt, ttt
Technical Address ............... ttt
nanjing, nanjing 300000
cn
Technical City .................. nanjing
Technical Province/State ........ nanjing
Technical Postal Code ........... 300000
Technical Country Code .......... cn
Technical Phone Number .......... 66666666 //虽然6这个数字很吉祥，不过，大家看了我这篇文章之后...
Technical Fax ................... 66666666
Technical Email ................. humanblue@263.net
Expiration Date ................. 28-Jan-2006 //这个啥意思大家都知道~~~

OK，真相大白了！！不过为了让大家更加信服，有一个步骤是必要di，也是黑客的长用手法――PING！！

先是tencent.cn
Ping request could not find host tencent.cn. Please check the name and try again.
呵呵，怪不得打不开呢！

然后是tencent.com
Pinging tencent.com [219.133.40.250] with 32 bytes of data:
全通

在然后是tencent.net
Pinging tencent.net [202.103.190.61] with 32 bytes of data:
全部超时

最后是tencent.cc
Pinging tencent.cc [218.30.116.143] with 32 bytes of data:
全通

好，我们去找一个IP地址数据库看看

tencent.cn could not find host 估计主机正在搬运到火星的途中
tencent.com IP ： 219.133.40.250 地址：广东省深圳市腾讯公司
tencent.net IP ： 202.103.190.61 地址：广东省深圳市 CZ88.NET
tencent.cc IP ： 218.30.116.143 地址：北京市电信机房

同志们，看见了？？tencent.cc放在了北京电信机房？？腾讯可一直都是放在深圳电信机房的啊！！
好了，现在看来，所谓“腾讯过大年，六位数的QQ不要要钱”的说法我们可以XXX掉了！！！

有些朋友问，那为什么tencent.cc可以送6位号码呢？
拜托，人家骗你你也相信？我去看了看，那个页面需要输入一个E-Mail地址才能“申请”，你有没有想过，别人会对

你的邮箱做些什么么？当然这只是推断！

好了，说了这么多，可能将很多人的6位QQ梦打破了，先说声对不起。但是Nir是在看不惯这种骗人的人！！！
如果Nir的推断有错误，或者您有十足的证据证明tencent.cc是腾讯官方的，请您联系我，谢谢！

这年头垃圾真多

[此贴被带脚镣跳舞(tuzi) 在 02月15日00时37分编辑过]

地主发表时间: 05-02-15 00:37