Re: People trying to sell "ARIN Leads"

[John Curran]

> On 8 Apr 2022, at 8:10 PM, Rob Seastrom  wrote:
> 
> 
> Wouldn’t hurt to associate that email (and perhaps some more honeypot 
> addresses at other domains with some orgids and assign them some resources.  
> Might as well cut out the middleman and have the violators rat themselves out…

RS - 

There are some “salted” entries at present, but the level of abuse experienced 
drops off fairly quickly after initial insertion.

/John

John Curran
President and CEO
American Registry for Internet Numbers

Re: People trying to sell "ARIN Leads"

[Rob Seastrom]

On Apr 8, 2022, at 19:01, John Curran  wrote:
> 
> Please forward each solicitation (in full with headers) to us via 
> 
> 
> (Unique emails that are only used in the Whois entry are the easiest 
> violations to pursue by far - so reporting such activity can make a huge 
> difference.)

Wouldn’t hurt to associate that email (and perhaps some more honeypot addresses 
at other domains with some orgids and assign them some resources.  Might as 
well cut out the middleman and have the violators rat themselves out…

-r

Sent from my iPad

Re: People trying to sell "ARIN Leads"

[John Curran]

Sabri -

Please forward each solicitation (in full with headers) to us via 

(Unique emails that are only used in the Whois entry are the easiest violations 
to pursue by far - so reporting such activity can make a huge difference.)

Thanks!
/John

John Curran
President and CEO
American Registry for Internet Numbers


> On Apr 8, 2022, at 4:21 PM, Sabri Berisha  wrote:
> 
> - On Apr 8, 2022, at 11:40 AM,  na...@jima.us wrote:
> 
> Hi,
> 
>> Of course, plausible deniability goes out the window when you receive sales
>> emails on an address that ONLY exists in ARIN Whois.
>> 
>> But no one would put a "canary trap" email in ARIN Whois...right?
> 
> You don't want to know how much spam I get on
> "thisipspaceisnotfors...@cluecentral.net". Including, ironically, from IPv4
> brokers.
> 
> Obviously, that email address is not being used for my Amazon account.
> 
> Thanks,
> 
> Sabri

Re: People trying to sell "ARIN Leads"

[Sabri Berisha]

- On Apr 8, 2022, at 11:40 AM,  na...@jima.us wrote:

Hi,

> Of course, plausible deniability goes out the window when you receive sales
> emails on an address that ONLY exists in ARIN Whois.
> 
> But no one would put a "canary trap" email in ARIN Whois...right?

You don't want to know how much spam I get on
"thisipspaceisnotfors...@cluecentral.net". Including, ironically, from IPv4
brokers.

Obviously, that email address is not being used for my Amazon account.

Thanks,

Sabri

Re: People trying to sell "ARIN Leads"

[Rob Seastrom]

> On Apr 8, 2022, at 2:40 PM, na...@jima.us wrote:
> 
> Of course, plausible deniability goes out the window when you receive sales 
> emails on an address that ONLY exists in ARIN Whois.
> 
> But no one would put a "canary trap" email in ARIN Whois...right?

I know of nobody who would do any such thing.  ;-)

-r

RE: People trying to sell "ARIN Leads"

[na...@jima.us]

Of course, plausible deniability goes out the window when you receive sales 
emails on an address that ONLY exists in ARIN Whois.

But no one would put a "canary trap" email in ARIN Whois...right?

- Jima

--
From: NANOG  On Behalf Of John Curran
Sent: Friday, April 8, 2022 05:03
To: Jon Sands 
Cc: NANOG list 
Subject: Re: People trying to sell "ARIN Leads"

Jon -  

You can forward such solicitations to mailto:complia...@arin.net - we’ll send 
them an appropriate nasty letter.  Definitely send any solicitation of unique 
contact data on Whois records to us - we do pursue misuse aggressively.

(With regard to this particular spam, I’d note there is an entire ecosystem of 
these “lead/demand” companies, and they aren’t generally selling the ARIN Whois 
data but instead contact data that’s been extracted from conference 
registration/attendee lists.  In this case I’d imagine you got targeted for 
receipt because your email has posted to the nanog mailing list recently.) 

Thanks!
/John

John Curran
President and CEO
American Registry for Internet Numbers



On 8 Apr 2022, at 12:46 AM, Jon Sands <mailto:fohdee...@gmail.com> wrote:

Does anyone else get email offers like the below? I get them at least once a 
week from various companies I've never heard of, I'm sure they pop up under 
different names constantly for obvious reasons. Crap like this I imagine is why 
a few of my POC emails listed on my ARIN assets get constant spam, I can't 
imagine how many places there are like this scraping then selling ARIN data to 
marketing outlets. name and email in the below *not* scrubbed for anonymity 
because they need to cut this shit out

 Forwarded Message  
Subject: 
Re: American Registry for Internet Numbers (ARIN) Leads 2022 2
Date: 
Thu, 7 Apr 2022 12:16:02 +
From: 
Julie Levay mailto:julie.le...@hoversamerica.com
To: 
mailto:j...@fohdeesha.com mailto:j...@fohdeesha.com

Hi,
Good Day!
Would you be interested in acquiring contacts of below?
Lists Contains: Operator/Carrier/Service Provider, VAR / Systems Integrator, 
Device Manufacturerr, Infrastructure Provider, Consultant, Software / 
Application Development, Telecom Software Provider, Gov't/ Utility / 
Enterprise, Telecom Equipment Manufacturer, Business and Technology Leaders, 
CTOs, Channel & Partner Managers, Business Development Managers, Analysts & 
Infrastructure Teams from Cloud Service Providers, Telecommunications, ISPs, 
ISVs and the IT Channel and Industry serving the cloud community and more.
We provide information like-Name, Email, Title, Phone Number and Company Details
 
Please let me know you’re below requirements in detail so that I can provide 
Counts and test file for your review.
Target Industry: ??
Target Geography: ??
Waiting for your response.
Regards,
Julie Levay
Demand Generation Specialists.

-- 
Jon Sands
MFI Labs
https://fohdeesha.com/

Re: People trying to sell "ARIN Leads"

[Tom Beecher]

I hear if they just moved to V6 and hosted email with Google, those emails
would just never arrive.

On Fri, Apr 8, 2022 at 12:40 PM Randy Bush  wrote:

> > Does anyone else get email offers like the below?
>
> of course.  i presume they signed the lrsa.
>
> randy
>

Re: People trying to sell "ARIN Leads"

[Randy Bush]

> Does anyone else get email offers like the below?

of course.  i presume they signed the lrsa.

randy

Re: People trying to sell "ARIN Leads"

[Jon Lewis]

All the time.  Note, their domain is hosted by Google and their email is 
hosted by Microsoft.  Complaints to either provider tend to fall on deaf 
ears.  If you reply asking for pricing, you'll likely be contacted from 
yet another domain.


On Fri, 8 Apr 2022, Jon Sands wrote:



Does anyone else get email offers like the below? I get them at least once a 
week from various companies
I've never heard of, I'm sure they pop up under different names constantly for 
obvious reasons. Crap like
this I imagine is why a few of my POC emails listed on my ARIN assets get 
constant spam, I can't imagine
how many places there are like this scraping then selling ARIN data to 
marketing outlets. name and email in
the below *not* scrubbed for anonymity because they need to cut this shit out


 Forwarded Message 
Subject:
Re: American Registry for Internet Numbers (ARIN) Leads 2022 2
Date:
Thu, 7 Apr 2022 12:16:02 +
From:
Julie Levay 
To:
j...@fohdeesha.com 

Hi,

Good Day!

Would you be interested in acquiring contacts of below?

Lists Contains: Operator/Carrier/Service Provider, VAR / Systems Integrator, 
Device Manufacturerr,
Infrastructure Provider, Consultant, Software / Application Development, 
Telecom Software Provider, Gov't/
Utility / Enterprise, Telecom Equipment Manufacturer, Business and Technology 
Leaders, CTOs, Channel &
Partner Managers, Business Development Managers, Analysts & Infrastructure 
Teams from Cloud Service
Providers, Telecommunications, ISPs, ISVs and the IT Channel and Industry 
serving the cloud community and
more.

We provide information like-Name, Email, Title, Phone Number and Company Details

 

Please let me know you’re below requirements in detail so that I can provide 
Counts and test file for your
review.

Target Industry: ??

Target Geography: ??

Waiting for your response.

Regards,

Julie Levay

Demand Generation Specialists.


--
Jon Sands
MFI Labs
https://fohdeesha.com/




--
 Jon Lewis, MCP :)   |  I route
 StackPath, Sr. Neteng   |  therefore you are
_ http://www.lewis.org/~jlewis/pgp for PGP public key_

Re: People trying to sell "ARIN Leads"

[John Curran]

Jon -

You can forward such solicitations to 
complia...@arin.net - we’ll send them an 
appropriate nasty letter.  Definitely send any solicitation of unique contact 
data on Whois records to us - we do pursue misuse aggressively.

(With regard to this particular spam, I’d note there is an entire ecosystem of 
these “lead/demand” companies, and they aren’t generally selling the ARIN Whois 
data but instead contact data that’s been extracted from conference 
registration/attendee lists.  In this case I’d imagine you got targeted for 
receipt because your email has posted to the nanog mailing list recently.)

Thanks!
/John

John Curran
President and CEO
American Registry for Internet Numbers


On 8 Apr 2022, at 12:46 AM, Jon Sands 
mailto:fohdee...@gmail.com>> wrote:


Does anyone else get email offers like the below? I get them at least once a 
week from various companies I've never heard of, I'm sure they pop up under 
different names constantly for obvious reasons. Crap like this I imagine is why 
a few of my POC emails listed on my ARIN assets get constant spam, I can't 
imagine how many places there are like this scraping then selling ARIN data to 
marketing outlets. name and email in the below *not* scrubbed for anonymity 
because they need to cut this shit out


 Forwarded Message 
Subject:Re: American Registry for Internet Numbers (ARIN) Leads 2022 2
Date:   Thu, 7 Apr 2022 12:16:02 +
From:   Julie Levay 

To: j...@fohdeesha.com 


Hi,
Good Day!
Would you be interested in acquiring contacts of below?
Lists Contains: Operator/Carrier/Service Provider, VAR / Systems Integrator, 
Device Manufacturerr, Infrastructure Provider, Consultant, Software / 
Application Development, Telecom Software Provider, Gov't/ Utility / 
Enterprise, Telecom Equipment Manufacturer, Business and Technology Leaders, 
CTOs, Channel & Partner Managers, Business Development Managers, Analysts & 
Infrastructure Teams from Cloud Service Providers, Telecommunications, ISPs, 
ISVs and the IT Channel and Industry serving the cloud community and more.
We provide information like-Name, Email, Title, Phone Number and Company Details

Please let me know you’re below requirements in detail so that I can provide 
Counts and test file for your review.
Target Industry: ??
Target Geography: ??
Waiting for your response.
Regards,
Julie Levay

Demand Generation Specialists.


--
Jon Sands
MFI Labs
https://fohdeesha.com/

People trying to sell "ARIN Leads"

[Jon Sands]

Does anyone else get email offers like the below? I get them at least 
once a week from various companies I've never heard of, I'm sure they 
pop up under different names constantly for obvious reasons. Crap like 
this I imagine is why a few of my POC emails listed on my ARIN assets 
get constant spam, I can't imagine how many places there are like this 
scraping then selling ARIN data to marketing outlets. name and email in 
the below *not* scrubbed for anonymity because they need to cut this 
shit out



 Forwarded Message 
Subject:Re: American Registry for Internet Numbers (ARIN) Leads 2022 2
Date:   Thu, 7 Apr 2022 12:16:02 +
From:   Julie Levay 
To: j...@fohdeesha.com 


Hi,

Good Day!

Would you be interested in acquiring contacts of *below?*

*_Lists Contains:_**Operator/Carrier/Service Provider, VAR / Systems 
Integrator, Device Manufacturerr, Infrastructure Provider, Consultant, 
Software / Application Development, Telecom Software Provider, Gov't/ 
Utility / Enterprise, Telecom Equipment Manufacturer, Business and 
Technology Leaders, CTOs, Channel & Partner Managers, Business 
Development Managers, Analysts & Infrastructure Teams from Cloud Service 
Providers, Telecommunications, ISPs, ISVs and the IT Channel and 
Industry serving the cloud community *and more.


*_We provide information like-_*Name, Email, Title, Phone Number and 
Company Details


Please let me know you’re below requirements in detail so that I can 
provide Counts and test file for your review.


*Target Industry: ??*

*Target Geography: ??*

*Waiting for your response.*

*Regards,*

*Julie Levay*

*Demand Generation Specialists.*

*
*

--
Jon Sands
MFI Labs
https://fohdeesha.com/