site Search:


 
    All Forums Hot Topics Gallery






how-to block ads


 
Search Topic:
Share Topic
Post a:
Post a:
AuthorAll Replies


owebtw

@NCTU.edu.tw

reply to James_d

Re: Whee, screwups all around.

3. Godaddy acted against the host rather than the compromised domain. Godaddy doesn't seem to have much reason to be involved in this.

The host WAS the compromised domain. The URL was:
»69.50.229.44.ip.nectartech.com/f···ndex.php
The phising website WAS on the domain "nectartech.com"
GoDaddy maintains that the phishing site was NOT removed.

The reason all the other domains in the data center went offline was due to the fact that nectartech set the nameservers of all their customers' domains to ns1.nectartech.com and ns2.nectartech.com. The entire datacenter is relying on the single domain "nectartech.com". Any failure of that SINGLE domain would render the ENTIRE datacenter and ALL other domains in the datacenter USELESS.

That's pretty stupid of them, IMHO.

James_d

join:2005-08-27
uk

I _hope_ godaddy abuse knows the difference between the generic names assigned to servers at a hosting company and the real domain at the site, which today is reported as www.Climaxmanila.com by www.whois.sc:

1 domains found on 69.50.229.44
Showing all 1.

Website
www.Climaxmanila.com

I also hope that abuse standards at godaddy do require acting against the offending domain, not its hosting company just because the address happens to be within the range the hosting company has and assigns to its hosted customers.

If this was the case at the time of the problem, godaddy could instead have chosen to act against the customer of its which controlled the box, because Climaxmanilla.com uses godaddy for its own domain name registration and godaddy could have shut that down instead. Interestingly:

Registrant:
The Plan C Group

Registered through: GoDaddy.com
Domain Name: CLIMAXMANILA.COM

Domain servers in listed order:
NS1.CLIMAXGLOBAL.COM
NS2.CLIMAXGLOBAL.COM

For complete domain details go to:
»who.godaddy.com/whoischeck.aspx

Climaxglobal.com is also registered with godaddy, so if godaddy wanted to shut down a nameserver, it also had an option there.

So, if these were the facts at the time, a little basic research would have told godaddy abuse who it should have been shutting down, if anyone. And that someone is not nectartech.

My apologies to climaxmanilla, climaxglobal and godaddy if these were not the facts at the time of the incident.


Sunday, 27-May 20:01:09 Terms of Use & Privacy | feedback | contact | Hosting by nac.net - DSL,Hosting & Co-lo
over 12.5 years online © 1999-2012 dslreports.com.
Most commented news this week
Hot Topics