Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

BUG | Whois date in past marked ACTIVE #403

Open
spirillen opened this issue Nov 17, 2024 · 4 comments
Open

BUG | Whois date in past marked ACTIVE #403

spirillen opened this issue Nov 17, 2024 · 4 comments
Assignees
Labels

Comments

@spirillen
Copy link
Contributor

What is the problem you are experiencing?

Found a couple of cases where the expiring date are in the past, yet, the records are marked active based on whois test

Subject                                                                                              Status      Source     Expiration Date   HTTP Code  Checker
---------------------------------------------------------------------------------------------------- ----------- ---------- ----------------- ---------- -------------
123lnk.xyz                                                                                           ACTIVE      WHOIS      01-oct-2024       Unknown    AVAILABILITY
22pixx.xyz                                                                                           ACTIVE      WHOIS      13-jun-2022       301        AVAILABILITY
drill 123lnk.xyz -T
;; ->>HEADER<<- opcode: QUERY, rcode: NXDOMAIN, id: 65418
;; flags: qr rd ra ; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;; -T.  IN      A

;; ANSWER SECTION:

;; AUTHORITY SECTION:
.       3334    IN      SOA     a.root-servers.net. nstld.verisign-grs.com. 2024111601 1800 900 604800 86400

;; ADDITIONAL SECTION:

;; Query time: 20 msec
drill 22pixx.xyz -T
;; ->>HEADER<<- opcode: QUERY, rcode: NXDOMAIN, id: 17018
;; flags: qr rd ra ; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;; -T.  IN      A

;; ANSWER SECTION:

;; AUTHORITY SECTION:
.       3334    IN      SOA     a.root-servers.net. nstld.verisign-grs.com. 2024111601 1800 900 604800 86400

;; ADDITIONAL SECTION:

;; Query time: 0 msec

How can we reproduce the problem?

To reproduce the problem:

test a expired WHOIS domain

Do you have a screenshot?

Screenshot

image

What did you expect to happen?

I don't know.. 😭

Is there a workaround?

No response

How did you configure PyFunceble?

.PyFunceble.overwrite.yaml

# Your configuration here

Which Operating System did you use?

Unix or *BSD like OS

Which Python Version did you use?

3.11

Which PyFunceble Version did you use?

4.3.0a9.dev

Additional context

I would like to add...

@spirillen
Copy link
Contributor Author

Yet another one

image

@spirillen
Copy link
Contributor Author

image

@spirillen
Copy link
Contributor Author

This one is outdated, not updated.

image

image

@spirillen
Copy link
Contributor Author

spirillen commented Nov 21, 2024

Here is even are more spookier one, thought Halloween was some American commercialized thing...

Let's play with 100gaoxx.com and the whois options. First we get the actual whois info

Domain Name: 100GAOXX.COM
Registry Domain ID: 2507193664_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namesilo.com
Registrar URL: http://www.namesilo.com
Updated Date: 2024-10-10T02:42:29Z
Creation Date: 2020-03-25T05:03:46Z
Registry Expiry Date: 2025-03-25T05:03:46Z

Now lets use PyFunceble to make some WHOIS tests

pyfunceble -d 100gaoxx.com

Subject                                                                                            Status      Source
---------------------------------------------------------------------------------------------------- ----------- ----------
100gaoxx.com                                                                                       ACTIVE      DNSLOOKUP
pyfunceble -d 100gaoxx.com --whois-lookup

Subject                                                                                            Status      Source
---------------------------------------------------------------------------------------------------- ----------- ----------
100gaoxx.com                                                                                       ACTIVE      DNSLOOKUP

Note

We asked for the WHOIS info, got replied with DNSLOOKUP!!!

pyfunceble -d 100gaoxx.com --whois-lookup-only

Subject                                                                                            Status      Source
---------------------------------------------------------------------------------------------------- ----------- ----------
100gaoxx.com                                                                                       INACTIVE    STDLOOKUP

Only one answers was right.... and it had nothing to do with WHOIS

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
Status: 🆕 New
Development

No branches or pull requests

2 participants