CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer

Add / Change Registrar
Goto page 1, 2, 3, 4, 5 ... 13, 14, 15  Next
 
Post new topic   Reply to topic       All -> FavForums -> Complainterator [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
tembow

Blue Angel
Premium Member

Joined: Oct 10, 2005
Posts: 2942

Blue Security Premium

PostPosted: Thu Apr 24, 2008 4:36 am    Post subject: Add / Change Registrar
Reply with quote

If you find a registrar who is not in the existing list, please add it in this forum topic.

Put in the web site name that used the registrar, and optionally the registrar and contact address.

For updates to the Complainterator contact list:

Spammed domain = ____________________
Registrar = ____________________________
Contact = _________[at]______._____

Of these 3 items, the first is mandatory, the 2nd and 3rd are optional.

E-mail via the complainterator.com contacts page, or append to this forum
PS - if you do put the contact email address, change @ to [at] so that overzealous moderators won't remove it. By ICANN regulations, all contact addresses are in a public record in http://www.icann.org/registrars/accreditation-qualified-list.html but not all moderators know that.

If you find that a complaint is rejected because an existing email address is no longer valid, please provide the mail bounce message here, too.

Back to top
View users profile Send private message Visit posters website AIM Address
Krivoi

Sergeant
Sergeant


Joined: Mar 03, 2008
Posts: 90


PostPosted: Fri Apr 25, 2008 10:07 pm    Post subject:
Reply with quote

I think I have got this right:

Quote:
Spammed domain = wqwip.info

Registrar = Directi Internet Solutions Pvt. Ltd. d/b/a PublicDomainRegistry.com (R159-LRMS)

Contact = tldadmin [at] directi.com


(New registrar added from the ICANN list of registrars by... me Very Happy )

Just let me know if I'm wrong, or if further info is required.

Back to top
View users profile Send private message
tembow

Blue Angel
Premium Member

Joined: Oct 10, 2005
Posts: 2942

Blue Security Premium

PostPosted: Sat Apr 26, 2008 7:26 am    Post subject:
Reply with quote

Thanks, added in next release

Note however that the existing contacts list uses a different address

Direct Information Pvt. Ltd. dba PublicDomainRegistry.com (R5-AFIN) ~ abuse@publicdomainregistry.com
Directi Internet Solutions d/b/a PublicDomainRegistry.Com (R27-LROR) ~ abuse@publicdomainregistry.com

Back to top
View users profile Send private message Visit posters website AIM Address
Jim_P

Sergeant
Sergeant
Premium Member

Joined: Apr 19, 2004
Posts: 133

Premium

PostPosted: Mon Apr 28, 2008 1:06 am    Post subject: Re: Add / Change Registrar
Reply with quote

tembow wrote:
If you find a registrar who is not in the existing list, please add it in this forum topic.

Put in the web site name that used the registrar, and optionally the registrar and contact address.

For updates to the Complainterator contact list:

Spammed domain = puigbanon.com
Registrar = Arsys Internet, S.L. dba NICLINE.COM
Contact = icann at arsys.es

Of these 3 items, the first is mandatory, the 2nd and 3rd are optional.

E-mail via the complainterator.com contacts page, or append to this forum
PS - if you do put the contact email address, change @ to [at] so that overzealous moderators won't remove it. By ICANN regulations, all contact addresses are in a public record in http://www.icann.org/registrars/accreditation-qualified-list.html but not all moderators know that.

If you find that a complaint is rejected because an existing email address is no longer valid, please provide the mail bounce message here, too.

Back to top
View users profile Send private message
pwillener

SRT Trainee
SRT Trainee
Premium Member

Joined: Apr 17, 2006
Posts: 1830
Location: Japan
Premium

PostPosted: Mon Apr 28, 2008 2:42 am    Post subject:
Reply with quote

Comparing the original Complainterator contacts file with my own, I find the following additional entries in my file, added over the last few months.

Spammed domain: yu-waku.bz
Registrar: 21Company,Inc.
Contact: e-info [at] 21-domain.com

Spammed domain: nike-brand.com
Registrar: 35 TECHNOLOGY CO., LTD
Contact: lwloo [at] 35.com, liveperson [at] 35.cn

Spammed domain: loans-commercial.com
Registrar: ACTIVE REGISTRAR, INC.
Contact: whois [at] activeregistrar.com

Spammed domain: (information lost)
Registrar: CRONON AG BERLIN, NIEDERLASSUNG REGENSBURG
Contact: harry [at] abc.ro

Spammed domain: (information lost)
Registrar: Directi Internet Solutions d/b/a PublicDomainRegistry.Com
Contact: abuse [at] publicdomainregistry.com

Spammed domain: gamblingtoday.biz
Registrar: DIRECTI INTERNET SOLUTIONS PVT. LTD. DBA PUBLICDOMAINREGISTRY.COM
Contact: abuse [at] publicdomainregistry.com

Spammed domain: cheapezadobe.com
Registrar: DOTARAI CO,. LTD.
Contact: info [at] dotarai.co.th

Spammed domain: uzaknet.org
Registrar: Dotregistrar, LLC (R114-LROR)
Contact: abuse [at] dotregistrar.com

Spammed domain: (information lost)
Registrar: Dotster, Inc. (R34-LROR)
Contact: abuse [at] dotregistrar.com

Spammed domain: wbsavingss.com
Registrar: DSTR ACQUISITION PA I, LLC DBA DOMAINBANK.COM
Contact: support [at] registerapi.com

Spammed domain: argonnecus.org
Registrar: DSTR Acquisition PA I, LLC dba DomainBank.com (R28-LROR)
Contact: support [at] registerapi.com

Spammed domain: tokarefu-44.org.uk
Registrar: eNom, Inc. [Tag = ENOM]
Contact: legal [at] enom.com, legal [at] name-services.com, Report.Abuse [at] enom.com

Spammed domain: (information lost)
Registrar: EstDomains, Inc. (R1345-LROR)
Contact: ***Paste-into-http://support.estdomains.com

Spammed domain: (information lost)
Registrar: GKG.NET,Inc. (R260-LRMS)
Contact: abuse [at] gkg.net

Spammed domain: sexfreejapan.info
Registrar: GMO Internet Inc. (R110-LRMS)
Contact: support [at] discount-domain.com

Spammed domain: liporex.com
Registrar: MYDOMAIN, INC.
Contact: support [at] registerapi.com

Spammed domain: buy-viagra-where.info
Registrar: Name.com LLC (R279-LRMS)
Contact: support [at] name.com

Spammed domain: loan.info
Registrar: NameScout Corp (R148-LRMS)
Contact: legal [at] namescout.com

Spammed domain: purepartners.biz
Registrar: NAMESECURE.COM, INC.
Contact: support [at] namesecure.com

Spammed domain: wwwwhttpwwwru.ru
Registrar: REGISTRATOR-REG-RIPN
Contact: abuse [at] masterhost.ru, info [at] mastername.ru

Spammed domain: games-alawar.ru
Registrar: REGRU-REG-RIPN
Contact: info [at] reg.ru

Spammed domain: sebumhewboo.com
Registrar: REGTIME LTD.
Contact: support [at] regtime.net

Spammed domain: (information lost)
Registrar: Todaynic.com, Inc. (R1316-LROR)
Contact: abuse [at] now.net.cn, sanry [at] now.net.cn, info [at] todaynic.com

Spammed domain: sukidayo.org
Registrar: Xin Net Technology Corporation (R118-LROR)
Contact: abuse [at] xinnet.com

Back to top
View users profile Send private message Visit posters website
Jim_P

Sergeant
Sergeant
Premium Member

Joined: Apr 19, 2004
Posts: 133

Premium

PostPosted: Mon Apr 28, 2008 8:42 pm    Post subject:
Reply with quote

Spammed domain: scramignon.com
Registrar: In2net Network Inc. (Canada)
Contact: registrar [at] in2net.com

Back to top
View users profile Send private message
AlphaCentauri

SIRT Handler
Premium Member

Joined: Nov 20, 2003
Posts: 2889

Premium

PostPosted: Mon Apr 28, 2008 11:34 pm    Post subject:
Reply with quote

scramignon.com is one of those hacked websites with redir.html and video.exe files placed on them (all sites have both). Report those to their ISPs and webmasters so that they can get their passwords changed and files cleaned. They are innocent domain owners; you don't need to have their domains suspended.

Back to top
View users profile Send private message
brewt

SIRT Handler
Premium Member

Joined: May 29, 2007
Posts: 792
Location: USA
MIRT Premium

PostPosted: Mon Apr 28, 2008 11:36 pm    Post subject:
Reply with quote

AlphaCentauri wrote:
scramignon.com is one of those hacked websites with redir.html and video.exe files placed on them (all sites have both).
I have found that some sites 404 on the video.exe even though the redirect functions as intended.

Back to top
View users profile Send private message
AlphaCentauri

SIRT Handler
Premium Member

Joined: Nov 20, 2003
Posts: 2889

Premium

PostPosted: Tue Apr 29, 2008 12:38 am    Post subject:
Reply with quote

I see those too; I'm assuming the video.exe got reported and removed because it attracted more attention, and the webmaster overlooked the redir.html file.

Back to top
View users profile Send private message
Jim_P

Sergeant
Sergeant
Premium Member

Joined: Apr 19, 2004
Posts: 133

Premium

PostPosted: Tue Apr 29, 2008 11:07 pm    Post subject:
Reply with quote

Spammed domain: topplanetcasino.com
Registrar: SUGGEST NAMES, INC
Contact:

Back to top
View users profile Send private message
pwillener

SRT Trainee
SRT Trainee
Premium Member

Joined: Apr 17, 2006
Posts: 1830
Location: Japan
Premium

PostPosted: Wed Apr 30, 2008 4:25 am    Post subject:
Reply with quote

Correction:

Spammed domain: casinoshka.net
Registrar: REGTIME LTD.
Contact: info [at] regtime.net (from http://www.icann.org/registrars/accreditation-qualified-list.html)

Back to top
View users profile Send private message Visit posters website
tembow

Blue Angel
Premium Member

Joined: Oct 10, 2005
Posts: 2942

Blue Security Premium

PostPosted: Wed Apr 30, 2008 11:08 am    Post subject:
Reply with quote

Jim_P wrote:
Spammed domain: scramignon.com
Registrar: In2net Network Inc. (Canada)
Contact: registrar [at] in2net.com


Is there any reason to report this particular web site?

It looks clean, and the name servers look legitimate. If this is a scam site, it is one of the slickest I've ever seen.

Back to top
View users profile Send private message Visit posters website AIM Address
Jim_P

Sergeant
Sergeant
Premium Member

Joined: Apr 19, 2004
Posts: 133

Premium

PostPosted: Wed Apr 30, 2008 11:27 am    Post subject:
Reply with quote

tembow wrote:
Jim_P wrote:
Spammed domain: scramignon.com
Registrar: In2net Network Inc. (Canada)
Contact: registrar [at] in2net.com


Is there any reason to report this particular web site?

It looks clean, and the name servers look legitimate. If this is a scam site, it is one of the slickest I've ever seen.


I think I goofed - did not know about redir.html

AlphaCentauri says

scramignon.com is one of those hacked websites with redir.html and video.exe files placed on them (all sites have both). Report those to their ISPs and webmasters so that they can get their passwords changed and files cleaned. They are innocent domain owners; you don't need to have their domains suspended.

Back to top
View users profile Send private message
ahoier

SIRT Handler


Joined: Jan 14, 2006
Posts: 1113
Location: USA

PostPosted: Wed Apr 30, 2008 5:12 pm    Post subject:
Reply with quote

different topic (Offtopic for this topic Razz) but yea, it's probably not extreme enough to run a complainterator report on this host....I would work through whois contacts FIRST...if say, within 5 businessdays (Monday-Friday usually, here in the US anyways Razz) the "scam" still exists (redir.html) - THEN address a report to the registrar responsible for this domain.

In the case of scramignon.com:

Some possible contacts (from spamcop):
abuse@in2net.com
abuse@gt.ca

From whois results for that domain:
abuse@doteasy.com

Back to top
View users profile Send private message Visit posters website AIM Address Yahoo Messenger MSN Messenger
brewt

SIRT Handler
Premium Member

Joined: May 29, 2007
Posts: 792
Location: USA
MIRT Premium

PostPosted: Wed Apr 30, 2008 6:44 pm    Post subject:
Reply with quote

If it is a hacked site, I think it is more efficient to go to the webhost before the registrar.

Back to top
View users profile Send private message
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> Complainterator All times are GMT
Goto page 1, 2, 3, 4, 5 ... 13, 14, 15  Next
Page 1 of 15

 
Quick Reply:
Username: 

Quote the last message
Attach signature (signatures can be changed in profile)
 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer