North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: [eweek article] Window of "anonymity" when domain exists, whois not updated yet

  • From: Nils Ketelsen
  • Date: Tue Jan 11 09:34:07 2005

On Tue, Jan 11, 2005 at 10:14:35AM +0000, [email protected] wrote:

> > But as article specifically mentions sending during the night and
> > registration next morning that does seem to indicate eweek found out
> > about "no whois" but with already registered domain, i.e. see
> Could they simply be referring to the technique of
> sending spam at night with a URL to a non-existent
> domain? When everyone's NOC sees the spam for the first
> time and tries to get the website shut down, it's not there.
> Tickets are closed, and many people think someone else
> already had the site taken down.

I was always interested to see how many people are
actually falling for these Spam messages. Did anybody here ever try to
register such a domain, after the mass mailing started but
before the spammer registers it? Just put a dummy page there and
then throw the access.log into a bunch of loganalyzers after a few days.



Nils