swejolin Posted October 13, 2005 Share Posted October 13, 2005 This may be off topic, since I do most of the work myself, to ensure the fastest action possible taken. I have been haunted by a pill-vending spammer, so I decided to haunt him back. So I have manually picked out the contact URL:s from the spam, done a Whois search and reported to the respective registrar. However, the URL:s used, merely contains redirectors. The spammer's vending site itself is located elsewhere. Now, the site is on an URL registered with rgnames.com. However I cannot find contact information to report abuse. :angry: (The spammer now used a GeoCities site to place the redirector on, redirecting to http:// www . nemobiltas . com which is registered with rgnames.com) Anyone knows what address to use when reporting spam to rgnames.com ? Link to comment Share on other sites More sharing options...
Wazoo Posted October 13, 2005 Share Posted October 13, 2005 This may be off topic, since I do most of the work myself, to ensure the fastest action possible taken. Yes, nothing seen dealing with an issue of the SpamCop Parsing & Reporting tool .. thusly moved this to the Lounge area. Anyone knows what address to use when reporting spam to rgnames.com ? 34114[/snapback] 10/13/05 02:36:58 Slow traceroute rgnames.com Trace rgnames.com (211.239.152.148) ... had you actually used the single-line interface ti the Parser tool; Parsing input: RGNAMES.COM Host rgnames.com (checking ip) = 211.239.152.148 whois for 211.239.152.148 : ip[at]epnetworks.co.kr abuse[at]epnetworks.co.kr Using abuse net on abuse[at]epnetworks.co.kr abuse net epnetworks.co.kr = postmaster[at]epnetworks.co.kr, spamcop[at]kisa.or.kr, abuse[at]epnetworks.co.kr Verified by looking at http://whois.nic.or.kr/english/index.html query: 211.239.152.148 [ ISP Organization Information ] Org Name : Enterprise Networks Service Name : ENTERPRISENET Org Address : 12F, Hyundai B/D, 646-1, Yeoksam-dong, Gangnam-gu [ ISP IP Admin Contact Information ] Name : IP Phone : +82-2-3415-4330 Fax : +82-2-3415-4939 E-Mail : ip[at]epnetworks.co.kr [ ISP IP Tech Contact Information ] Name : IP Phone : +82-2-3415-4330 Fax : +82-2-3415-4939 E-mail : ip[at]epnetworks.co.kr [ ISP Network Abuse Contact Information ] Name : Postmaster Phone : +82-2-3415-4330 Fax : +82-2-3415-4939 E-mail : abuse[at]epnetworks.co.kr whois -h whois.crsnic.net rgnames.com ... Redirecting to WOOHO T&C CO., LTD. D/B/A RGNAMES.COM whois -h whois.rgnames.com rgnames.com ... Welcome to RGNames.com's WHOIS data service Domain Name: RGNAMES.COM Domain Status: LOCK Registrar: Wooho T&C Co., Ltd. d/b/a RGNames.com Referral URL: http://www.RGNames.com Domain Registration Date....: 2001-05-12 GMT. Domain Expiration Date......: 2006-05-12 GMT. Domain Last Updated Date....: 2005-02-15 01:12:25 GMT. Registrant: Wooho Technology Co.Ltd. 159-6, Samseong-dong, Gangnam-gu Seoul, 135090 KR Administrative Contact: Wooho Technology Co.Ltd. help[at]rgnames.com 159-6, Samseong-dong, Gangnam-gu Seoul, 135090 KR (PHONE) +82-2-551-1511 (FAX) +82-2-551-1512 Technical Contact: Wooho Technology Co.Ltd. help[at]rgnames.com 159-6, Samseong-dong, Gangnam-gu Seoul, 135090 KR (PHONE) +82-2-551-1511 (FAX) +82-2-551-1512 Billing Contact: Wooho Technology Co.Ltd. help[at]rgnames.com 159-6, Samseong-dong, Gangnam-gu Seoul, 135090 KR (PHONE) +82-2-551-1511 (FAX) +82-2-551-1512 Domain Name Servers in listed order: NS1.RGNAMES.COM 211.234.103.131 NS2.RGNAMES.COM 211.234.103.142 Link to comment Share on other sites More sharing options...
bobbear Posted October 24, 2005 Share Posted October 24, 2005 I'd also be interested if anyone knows a valid abuse reporting address for rgnames.com registered spammers. All the usual one bounce for me, including help[at]rgnames.com. Link to comment Share on other sites More sharing options...
Jeff G. Posted October 25, 2005 Share Posted October 25, 2005 I'd also be interested if anyone knows a valid abuse reporting address for rgnames.com registered spammers. All the usual one bounce for me, including help[at]rgnames.com.34806[/snapback] Any bounce of help[at]rgnames.com should be reported via the InterNIC Whois Data Problem Report System. In the meantime, per InterNIC - Registrar List and http://www.internic.net/registrars/registrar-300.html, please try to email contact[at]rgnames.com or use any other contact info on http://www.internic.net/registrars/registrar-300.html. Link to comment Share on other sites More sharing options...
bobbear Posted October 25, 2005 Share Posted October 25, 2005 Update - although I've had bounces on recent reports to help[at]rgnames . com I've also just had a response from it to my last one: Dear Bob, Thank you for informing us on <ohorah . com> We will take appropriate action to this matter, it will be resolved within 72 hours. Thank you. Regards, T At least rgnames have an AUP in place that enables them to action abuse reports, (Paragraph 7 of their service aggreement). There are still those Registrars such as Total Registrations that don't have a similar AUP and won't take any action on anything other than false whois data. What's to be done about them, I wonder? With the number of bomb-proof hosts that there are and abuse depts either ineffective or going t/u (Kornet) the registrar is often more effective if he's prepared to act IMHO. I wonder what other people think? Link to comment Share on other sites More sharing options...
bobbear Posted October 26, 2005 Share Posted October 26, 2005 Full marks to rgnames. They've come back to me with the following response: "Dear Bob, You may send us the details through here (contact[at]rgnames . com) or you may send your abuse report to help[at]r . co . kr Thank you. Regards, T" I've also had another batch of 'action to be taken in 72 hours notices' from them. I hope they can keep this up & don't get swamped.... Link to comment Share on other sites More sharing options...
Jeff G. Posted October 26, 2005 Share Posted October 26, 2005 That's great! Please ask them to staff their help, postmaster, and abuse addresses. Thanks! Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.