A bug (which might be seen as a feature) in whois allows sub domains that contain a certain string (for example: microsoft.com) to be found before the actual identical domain name. For example:
MICROSOFT.COM.IS.SECRETLY.RUN.BY.ILLUMINATI.TERRORISTS.NET
Will be found before
MICROSOFT.COM
взято с
http://www.securiteam.com/securitynews/6D00L0K00G.html
попробуйте сами