Katrina versus Rita (w/security spin)

["Hubbard, Dan" <dhubbard () websense com>]

Just like Katrina it looks like the fraudsters are anticipating the
hurricane again with loaded bullets on the "spam" button. Although not
near as large we are seeing small numbers of domain registrations under
rita + 'relief|donation|fund|hurricane' in the .com and .org domains.

The plus side is that some of them are registered to mark monitor. So
hopefully the Red Cross or someone else is a customer of theirs and they
are protecting the domain space.


# whois ritadonations.com
[Querying whois.internic.net]
[Redirected to whois.markmonitor.com]
[Querying whois.markmonitor.com]
[whois.markmonitor.com]
MarkMonitor.com - The Leader in Corporate Domain Management
----------------------------------------------------------
For Global Domain Consolidation, Research & Intelligence,
and Enterprise DNS, go to: www.markmonitor.com
----------------------------------------------------------

The Data in MarkMonitor.com's WHOIS database is provided by
MarkMonitor.com
for information purposes, and to assist persons in obtaining information
about or related to a domain name registration record.  MarkMonitor.com
does not guarantee its accuracy.  By submitting a WHOIS query, you agree
that you will use this Data only for lawful purposes and that, under no
circumstances will you use this Data to: (1) allow, enable, or otherwise
support the transmission of mass unsolicited, commercial advertising or
solicitations via e-mail (spam); or  (2) enable high volume, automated,
electronic processes that apply to MarkMonitor.com (or its systems).
MarkMonitor.com reserves the right to modify these terms at any time.
By submitting this query, you agree to abide by this policy.

Registrant:
        MarkMonitor, Inc. (DOM-1411095)
        391 N. Ancestor Place Boise ID 83713 US

    Domain Name: ritadonations.com

        Registrar Name: Markmonitor.com
        Registrar Whois: whois.markmonitor.com
        Registrar Homepage: http://www.markmonitor.com

    Administrative Contact:
        Domain Admin (NIC-14444692)  MarkMonitor, Inc.
        391 N. Ancestor Place Boise ID 83713 US
        eric.jacky () markmonitor com +1.2086851820 Fax- +1.
    Technical Contact, Zone Contact:
        Domain Admin (NIC-14444692)  MarkMonitor, Inc.
        391 N. Ancestor Place Boise ID 83713 US
        eric.jacky () markmonitor com +1.2086851820 Fax- +1.

    Created on..............: 2005-Sep-02.
    Expires on..............: 2006-Sep-02.
    Record last updated on..: 2005-Sep-08 11:17:12.

    Domain servers in listed order:

    DNS1.EMARKMONITOR.COM
    DNS2.EMARKMONITOR.COM

MarkMonitor.com - The Leader in Corporate Domain Management
----------------------------------------------------------
For Global Domain Consolidation, Research & Intelligence,
and Enterprise DNS, go to: www.markmonitor.com
----------------------------------------------------------

http://www.markmonitor.com




 

-----Original Message-----
From: funsec-bounces () linuxbox org [mailto:funsec-bounces () linuxbox org]
On Behalf Of Fergie (Paul Ferguson)
Sent: Wednesday, September 21, 2005 5:58 PM
To: funsec () linuxbox org
Subject: [funsec] Side by side comparison: Katrina & Rita

I know this has absolutely nothing to do with security (with the
exception of our butts here in the Great State of Texas), but it it is
interesting nonetheless.

As you may have heard, Rita is now the 3rd most powerful hurricane to
approach the U.S. in history:

http://fergdawg.blogspot.com/2005/09/hurricane-rita-now-third-most-power
ful.html

And, I've just put up a side-by-side animated comparison of Katrina &
Rita as presented by NOAA:

http://fergdawg.blogspot.com/2005/09/side-by-side-comparison-katrina-rit
a.html

The people here are going crazy -- see associated stories on
http://www.statesman.com/ and I'll also be posting from my blog.

I spent most of the day today, as I will tomorrow, turning "down"
network sites all along the Texas Gulf Coast for the state...

- ferg


--
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet  fergdawg () netzero net or
fergdawg () sbcglobal net  ferg's tech blog: http://fergdawg.blogspot.com/

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.