[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
ouch..
Or possibly Cisco is trying to cover their tracks.
Owen
On Sep 14, 2011, at 4:15 AM, Brian Raaen wrote:
> Looks like some random person registered this one. The domain and ip do not look related to cisco even though someone has falsely pasted their logo all over the site.
>
>
>
> whois overpromisesunderdelivers.net
>
> Whois Server Version 2.0
>
> Domain names in the .com and .net domains can now be registered
> with many different competing registrars. Go to http://www.internic.net
> for detailed information.
>
> Domain Name: OVERPROMISESUNDERDELIVERS.NET
> Registrar: GODADDY.COM, INC.
> Whois Server: whois.godaddy.com
> Referral URL: http://registrar.godaddy.com
> Name Server: NS35.DOMAINCONTROL.COM
> Name Server: NS36.DOMAINCONTROL.COM
> Status: clientDeleteProhibited
> Status: clientRenewProhibited
> Status: clientTransferProhibited
> Status: clientUpdateProhibited
> Updated Date: 05-sep-2011
> Creation Date: 05-sep-2011
> Expiration Date: 05-sep-2012
>
> Registrant:
> Domains by Proxy, Inc.
> DomainsByProxy.com
> 15111 N. Hayden Rd., Ste 160, PMB 353
> Scottsdale, Arizona 85260
> United States
>
> Registered through: GoDaddy.com, Inc. (http://www.godaddy.com)
> Domain Name: OVERPROMISESUNDERDELIVERS.NET
> Created on: 05-Sep-11
> Expires on: 05-Sep-12
> Last Updated on: 05-Sep-11
>
> Administrative Contact:
> Private, Registration OVERPROMISESUNDERDELIVERS.NET at domainsbyproxy.com
> Domains by Proxy, Inc.
> DomainsByProxy.com
> 15111 N. Hayden Rd., Ste 160, PMB 353
> Scottsdale, Arizona 85260
> United States
> (480) 624-2599 Fax -- (480) 624-2598
>
> Technical Contact:
> Private, Registration OVERPROMISESUNDERDELIVERS.NET at domainsbyproxy.com
> Domains by Proxy, Inc.
> DomainsByProxy.com
> 15111 N. Hayden Rd., Ste 160, PMB 353
> Scottsdale, Arizona 85260
> United States
> (480) 624-2599 Fax -- (480) 624-2598
>
> Domain servers in listed order:
> NS35.DOMAINCONTROL.COM
> NS36.DOMAINCONTROL.COM
>
>
>
> braaen at brian:~$ dig OVERPROMISESUNDERDELIVERS.NET
>
> ; <<>> DiG 9.7.3 <<>> OVERPROMISESUNDERDELIVERS.NET
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 40339
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
>
> ;; QUESTION SECTION:
> ;OVERPROMISESUNDERDELIVERS.NET. IN A
>
> ;; ANSWER SECTION:
> OVERPROMISESUNDERDELIVERS.NET. 3364 IN A 98.129.229.190
>
> ;; AUTHORITY SECTION:
> OVERPROMISESUNDERDELIVERS.NET. 3364 IN NS ns36.domaincontrol.com.
> OVERPROMISESUNDERDELIVERS.NET. 3364 IN NS ns35.domaincontrol.com.
>
> ;; ADDITIONAL SECTION:
> ns35.domaincontrol.com. 3046 IN A 216.69.185.18
> ns36.domaincontrol.com. 3046 IN A 208.109.255.18
>
>
> braaen at brian:~$ dig -x 98.129.229.190
>
> ; <<>> DiG 9.7.3 <<>> -x 98.129.229.190
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26507
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
>
> ;; QUESTION SECTION:
> ;190.229.129.98.in-addr.arpa. IN PTR
>
> ;; AUTHORITY SECTION:
> 229.129.98.in-addr.arpa. 300 IN SOA ns.rackspace.com. hostmaster.rackspace.com. 1314291452 3600 300 1814400 300
>
>
>
> ---
> Brian Raaen
> Network Architect
> Zcorum
> On Wed, Sep 14, 2011 at 11:42:35AM +0100, Martin Hepworth wrote:
>> http://www.overpromisesunderdelivers.net/
>>
>>
>> --
>> Martin Hepworth
>> Oxford, UK
- References:
- ouch..
- From: maxsec at gmail.com (Martin Hepworth)
- ouch..
- From: nanog at rhemasound.org (Brian Raaen)