[gnso-rds-pdp-wg] [OFF TOPIC] Hard to push for transparency, unless it starts at the top..
Michael Peddemors
michael at linuxmagic.com
Tue Oct 31 15:02:33 UTC 2017
Yes, of course.. those of us in the industry might know to check ARIN,
however the domain maintainer information is supposed to also be easily
available, and most CAN-SPAM legislations and guidelines also specify
those requirements.
The ordinary person though should be able to get this information to
report abuse.
But the real point is/was.. when even a registrar doesn't provide abuse
information for their own company via whois.. We won't expect them to
worry about customers transparency.
>> Registrar Abuse Contact Email:
>> Registrar Abuse Contact Phone:
On 17-10-30 12:53 PM, pkngrds at klos.net wrote:
> On 10/30/2017 2:24 PM, Michael Peddemors wrote:
>> This happened to come across the desk..
>>
>> SpamAuditor's reporting spam..
>>
>> Received: from host16.registrar-servers.com (HELO host16.registrar-servers.com) (198.54.115.245)
>>
>> Obvious choice would be to contact their abuse department..
>>
>> whois registrar-servers.com
>>
>> Domain Name: REGISTRAR-SERVERS.COM
>> Registry Domain ID: 1326800137_DOMAIN_COM-VRSN
>> Registrar WHOIS Server: whois.enom.com
>
> Use the WHOIS server listed to get more information about the domain:
>
> Domain Name: REGISTRAR-SERVERS.COM
> Registry Domain ID: 1326800137_DOMAIN_COM-VRSN
> Registrar WHOIS Server: whois.enom.com
> Registrar URL: www.enom.com
> Updated Date: 2017-10-10T01:10:02.00Z
> Creation Date: 2007-11-08T15:04:30.00Z
> Registrar Registration Expiration Date: 2018-11-08T15:04:00.00Z
> Registrar: ENOM, INC.
> Registrar IANA ID: 48
> Reseller: NAMECHEAP, INC
> Domain Status: clientTransferProhibited
> https://www.icann.org/epp#clientTransfer
> Prohibited
> Registry Registrant ID:
> Registrant Name: NAMECHEAP.COM NAMECHEAP.COM
> Registrant Organization: NAMECHEAP, INC
> Registrant Street: 4600 EAST WASHINGTON STREET, SUITE 305
> Registrant City: PHOENIX
> Registrant State/Province: AZ
> Registrant Postal Code: 85034
> Registrant Country: US
> Registrant Phone: +1.6613102107
> Registrant Phone Ext:
> Registrant Fax: +1.6613102107
> Registrant Fax Ext:
> Registrant Email: SUPPORT at NAMECHEAP.COM
> Registry Admin ID:
> Admin Name: NAMECHEAP.COM NAMECHEAP.COM
> Admin Organization: NAMECHEAP, INC
> Admin Street: 4600 EAST WASHINGTON STREET, SUITE 305
> Admin City: PHOENIX
> Admin State/Province: AZ
> Admin Postal Code: 85034
> Admin Country: US
> Admin Phone: +1.6613102107
> Admin Phone Ext:
> Admin Fax: +1.6613102107
> Admin Fax Ext:
> Admin Email: SUPPORT at NAMECHEAP.COM
> Registry Tech ID:
> Tech Name: NAMECHEAP.COM NAMECHEAP.COM
> Tech Organization: NAMECHEAP, INC
> Tech Street: 4600 EAST WASHINGTON STREET, SUITE 305
> Tech City: PHOENIX
> Tech State/Province: AZ
> Tech Postal Code: 85034
> Tech Country: US
> Tech Phone: +1.6613102107
> Tech Phone Ext:
> Tech Fax: +1.6613102107
> Tech Fax Ext:
> Tech Email: SUPPORT at NAMECHEAP.COM
> Name Server: A1.VERISIGNDNS.COM
> Name Server: A2.VERISIGNDNS.COM
> Name Server: A3.VERISIGNDNS.COM
> DNSSEC: unSigned
> Registrar Abuse Contact Email: abuse at enom.com
> Registrar Abuse Contact Phone: +1.4252982646
> URL of the ICANN WHOIS Data Problem Reporting System:
> http://wdprs.internic.net/
>
> That implies 'SUPPORT at NAMECHEAP.COM', not that you would get any
> satisfaction from them - they seem to be more interested in letting bad
> guys run rampant on their servers than doing a little bit of work to
> find the problem and fix it!
>
> As someone else suggested, use WHOIS on the actual IP address and get this:
>
> #
> # ARIN WHOIS data and services are subject to the Terms of Use
> # available at: https://www.arin.net/whois_tou.html
> #
> # If you see inaccuracies in the results, please report at
> # https://www.arin.net/public/whoisinaccuracy/index.xhtml
> #
>
>
> #
> # Query terms are ambiguous. The query is assumed to be:
> # "n 198.54.115.245"
> #
> # Use "?" to get help.
> #
>
> #
> # The following results may also be obtained via:
> #
> https://whois.arin.net/rest/nets;q=198.54.115.245?showDetails=true&showARIN=fa
> lse&showNonArinTopLevelNet=false&ext=netref2
> #
>
> NetRange: 198.54.112.0 - 198.54.127.255
> CIDR: 198.54.112.0/20
> NetName: NAMEC-4
> NetHandle: NET-198-54-112-0-1
> Parent: NET198 (NET-198-0-0-0-0)
> NetType: Direct Allocation
> OriginAS:
> Organization: Namecheap, Inc. (NAMEC-4)
> RegDate: 2015-11-13
> Updated: 2015-11-13
> Ref: https://whois.arin.net/rest/net/NET-198-54-112-0-1
>
>
> OrgName: Namecheap, Inc.
> OrgId: NAMEC-4
> Address: 11400 W. Olympic Blvd. Suite 200
> City: Los Angeles
> StateProv: CA
> PostalCode: 90064
> Country: US
> RegDate: 2011-01-28
> Updated: 2017-01-28
> Ref: https://whois.arin.net/rest/org/NAMEC-4
>
> ReferralServer: rwhois://whois.namecheaphosting.com:4321
>
> OrgTechHandle: EFIME-ARIN
> OrgTechName: Efimenko, Igor
> OrgTechPhone: +1-323-375-2822
> OrgTechEmail: igor.e at namecheap.com
> OrgTechRef: https://whois.arin.net/rest/poc/EFIME-ARIN
>
> OrgTechHandle: TECHT4-ARIN
> OrgTechName: Tech team
> OrgTechPhone: +1-661-310-2107
> OrgTechEmail: tech at namecheaphosting.com
> OrgTechRef: https://whois.arin.net/rest/poc/TECHT4-ARIN
>
> OrgAbuseHandle: ABUSE2885-ARIN
> OrgAbuseName: Abuse team
> OrgAbusePhone: +1-323-375-2822
> OrgAbuseEmail: abuse at namecheaphosting.com
> OrgAbuseRef: https://whois.arin.net/rest/poc/ABUSE2885-ARIN
>
>
> #
> # ARIN WHOIS data and services are subject to the Terms of Use
> # available at: https://www.arin.net/whois_tou.html
> #
> # If you see inaccuracies in the results, please report at
> # https://www.arin.net/public/whoisinaccuracy/index.xhtml
> #
>
> But that sends you to the same useless company. :o(
>
> Patrick Klos
> Klos Technologies, Inc.
>
>> Registrar URL:http://www.enom.com
>> Updated Date: 2017-10-19T15:09:30Z
>> Creation Date: 2007-11-08T15:04:30Z
>> Registry Expiry Date: 2018-11-08T15:04:30Z
>> Registrar: eNom, Inc.
>> Registrar IANA ID: 48
>> Registrar Abuse Contact Email:
>> Registrar Abuse Contact Phone:
>> Domain Status: clientTransferProhibitedhttps://icann.org/epp#clientTransferProhibited
>> Name Server: A1.VERISIGNDNS.COM
>> Name Server: A2.VERISIGNDNS.COM
>> Name Server: A3.VERISIGNDNS.COM
>> DNSSEC: unsigned
>> URL of the ICANN Whois Inaccuracy Complaint Form:https://www.icann.org/wicf/
>>
>> X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
>> X-AntiAbuse: Primary Hostname - host16.registrar-servers.com
>> X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
>> X-AntiAbuse: Sender Address Domain - 2DayCloud.com
>> X-Get-Message-Sender-Via: host16.registrar-servers.com: authenticated_id:info at 2daycloud.com
>> X-Authenticated-Sender: host16.registrar-servers.com:info at 2daycloud.com
>>
>> So, you tell me.. how would you report this abuse ;)
>>
>>
>>
>> --
>> "Catch the Magic of Linux..."
>> ------------------------------------------------------------------------
>> Michael Peddemors, President/CEO LinuxMagic Inc.
>> Visit us athttp://www.linuxmagic.com @linuxmagic
>> ------------------------------------------------------------------------
>> A Wizard IT Company - For More Infohttp://www.wizard.ca
>> "LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd.
>> ------------------------------------------------------------------------
>> 604-682-0300 Beautiful British Columbia, Canada
>>
>> This email and any electronic data contained are confidential and intended
>> solely for the use of the individual or entity to which they are addressed.
>> Please note that any views or opinions presented in this email are solely
>> those of the author and are not intended to represent those of the company.
>>
>>
>> _______________________________________________
>> gnso-rds-pdp-wg mailing list
>> gnso-rds-pdp-wg at icann.org
>> https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg
>
>
>
> _______________________________________________
> gnso-rds-pdp-wg mailing list
> gnso-rds-pdp-wg at icann.org
> https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg
>
--
"Catch the Magic of Linux..."
------------------------------------------------------------------------
Michael Peddemors, President/CEO LinuxMagic Inc.
Visit us at http://www.linuxmagic.com @linuxmagic
------------------------------------------------------------------------
A Wizard IT Company - For More Info http://www.wizard.ca
"LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd.
------------------------------------------------------------------------
604-682-0300 Beautiful British Columbia, Canada
This email and any electronic data contained are confidential and intended
solely for the use of the individual or entity to which they are addressed.
Please note that any views or opinions presented in this email are solely
those of the author and are not intended to represent those of the company.
More information about the gnso-rds-pdp-wg
mailing list