Blog for hpHosts, and whatever else I feel like writing about ....

Thursday 23 July 2009

DirectI: An update ....

I've received a response from Aman at DirectI concerning the domains we (as in, those of us in the sec com, not just me ;o)) found;

Dear Steven,

All domain names listed on the given posts, registered under registrar Public Domain Registry, are now suspended. Domains listed on http://msmvps.com/blogs/spywaresucks/archive/2009/07/22/1704910.aspx were taken down yesterday. Upon investigating further, we found a few more domain names registered in a similar manner, which are also now on hold. The registration pattern seems to be non-conventional and somehow these perpetrators managed to sneak in and register these domain names with different identities. We are still investigating these trends to beef up our internal tools to detect such registrations. For now, these customer accounts are frozen.

Most of these registrations were done during an ongoing promotional offer on .IN domain names. There are a quite a few domain names in the list that are registered with Sponsoring Registrar: Visesh Infotecnics Ltd. (R42-AFIN) who might also be running this promo offer. Please note that Visesh Infotecnics Ltd is an independent registrar using a management platform that we provide. We have forwarded them this list and asked them to take action according to their abuse policy.

Please be assured that our intentions and attitude towards abuse remains to be that of zero tolerance.

Our alert email address is precisely for sharing intelligence with us so that such issues can be nipped in the bud.

We look forward to your co-operation and understanding.

Best Regards;
Aman Masjide
DirectI Abuse Desk


I'm extremely happy to see they've not gone back to their old ways - major kudos to DirectI!

No comments: