Gustav

[Jon Kibler <Jon.Kibler () aset com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

All,

SANS just posted a list of domains that has been registered in
anticipation of Gustav:
   http://isc.sans.org/diary.html?storyid=4954


Let's follow the money. Looking at the domains SANS has listed...

Who is the registrar for these domains?
   1 dreamhost.com
   1 dynadot.com
   2 register.com
   5 wildwestdomains.com
  11 godaddy.com

Who registered the domains?
  15 are anonymous
   5 are individuals, 1 each from:
      Crestwood, Illinois
      Muscle Shoals, Alabama
      Ansan, Gyeonggi-do, South Korea
      Mandeville, Louisiana
      Brea, CA

All individuals have area codes that match their city, so they are
probably not fake addresses.

Where are the name servers?
   2 DNSSAFE.COM
   2 SECURESERVER.NET
   3 DREAMHOST.COM
   8 REGISTER.COM
  30 DOMAINCONTROL.COM

All are parking servers.

So, even if Gustav is a dud, who made money here?


Jon Kibler
- --
Jon R. Kibler
Chief Technical Officer
Advanced Systems Engineering Technology, Inc.
Charleston, SC  USA
o: 843-849-8214
c: 843-224-2494
s: 843-564-4224

My PGP Fingerprint is:
BAA2 1F2C 5543 5D25 4636 A392 515C 5045 CF39 4253


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAki5jXcACgkQUVxQRc85QlMowwCeNKuVV/FvsokhFWOkiA7yIF5g
BNcAmwSwjKYioQ7aiCxYOd8qLbRhI3BH
=70cN
-----END PGP SIGNATURE-----




==================================================
Filtered by: TRUSTEM.COM's Email Filtering Service
http://www.trustem.com/
No Spam. No Viruses. Just Good Clean Email.

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.