ICANN/DNSO
DNSO Mailling lists archives

[ga]

<<< Chronological Index >>>    <<< Thread Index >>>

Re: [ga] icannatlarge.com hacked



Thomas Roessler wrote:
20020422174803.GT26167@yoda.does-not-exist.org"> On 2002-04-22 09:41:14 -0700, William S. Lovell wrote:

I've not seen a single one that has addressed the issue of seeking to track down who did the hacking.  Would that not be the first  issue on the agenda?

The defaced page's text listed an address @xpaxo.net, and if you  look at www.xpaxo.net, you'll even find icannatlarge.com on a list  of the sites these guys (apparently some Russian script-kiddies) are proud to have defaced.  The log snippet which is in Joop's message  has some more information on the hack, which actually points into  the same direction.

So then a simple WHOIS through NSI (believe it or not!) yields the report shown below.  
(To William X. Walsh: See, it wasn't all that hard.)
So does anyone want to know what the next step might be?

(The proper availability of the information shown below should not be confused with the
quite separate issue of Bulk WHOIS availability, also being discussed in ga@dnso.org.)

Bill Lovell

Organization:
      Ventura
      Larry Hochhalter
      4475 Dupont Court     unit # 1
      Ventura, CA 93003
      US
      Phone: 79216032747
      Email: mstitel@fromru.com

   Registrar Name....: Register.com
   Registrar Whois...: whois.register.com
   Registrar Homepage: http://www.register.com

   Domain Name: XPAXO.NET

      Created on..............: Mon, Apr 15, 2002
      Expires on..............: Sun, Apr 15, 2007
      Record last updated on..: Mon, Apr 15, 2002

   Administrative Contact:
      Ventura
      Larry Hochhalter
      4475 Dupont Court     unit # 1
      Ventura, CA 93003
      US
      Phone: 79216032747
      Email: mstitel@fromru.com

   Technical Contact:
      C I Host
   
   Network Operations
      1851 Central Drive #110
      Bedford, TX 76021
      US
      Phone: 888-868-9931
      Fax..: 888-242-7554
      Email: hostmaster@cihost.com

   Zone Contact:
      C I Host
      C I Host
      1851 Central Drive Suite 110
      Bedford, TX 76021
      US
      Phone: 817-868-6999
      Fax..: 817-868-7203
      Email: register@cihost.com

   Domain servers in listed order:

   NS.CIHOST.COM                                     216.221.162.81    
   NS1.LAX.PROPAGATION.NET                           66.34.193.1       

Register your domain name at http://www.register.com

You may be able to buy this domain name through http://www.afternic.com/offer

The previo
us information has been obtained either directly from the
registrant or a registrar of the domain name other than Network Solutions.
Network Solutions, therefore, does not guarantee its accuracy or
completeness.

<<< Chronological Index >>>    <<< Thread Index >>>