People trying to sell "ARIN Leads"

Mailman List Mirror (Read Only)
1

Does anyone else get email offers like the below? I get them at least once a week from various companies I’ve never heard of, I’m sure they pop up under different names constantly for obvious reasons. Crap like this I imagine is why a few of my POC emails listed on my ARIN assets get constant spam, I can’t imagine how many places there are like this scraping then selling ARIN data to marketing outlets. name and email in the below not scrubbed for anonymity because they need to cut this shit out

2

Jon -

You can forward such solicitations to compliance@arin.net - we’ll send them an appropriate nasty letter. Definitely send any solicitation of unique contact data on Whois records to us - we do pursue misuse aggressively.

(With regard to this particular spam, I’d note there is an entire ecosystem of these “lead/demand” companies, and they aren’t generally selling the ARIN Whois data but instead contact data that’s been extracted from conference registration/attendee lists. In this case I’d imagine you got targeted for receipt because your email has posted to the nanog mailing list recently.)

Thanks!
/John

John Curran
President and CEO
American Registry for Internet Numbers

3

All the time. Note, their domain is hosted by Google and their email is hosted by Microsoft. Complaints to either provider tend to fall on deaf ears. If you reply asking for pricing, you'll likely be contacted from yet another domain.

4

Does anyone else get email offers like the below?

of course. i presume they signed the lrsa.

randy

5

I hear if they just moved to V6 and hosted email with Google, those emails would just never arrive.

6

Of course, plausible deniability goes out the window when you receive sales emails on an address that ONLY exists in ARIN Whois.

But no one would put a "canary trap" email in ARIN Whois...right?

- Jima

7

I know of nobody who would do any such thing. :wink:

-r

8

Hi,

Of course, plausible deniability goes out the window when you receive sales
emails on an address that ONLY exists in ARIN Whois.

But no one would put a "canary trap" email in ARIN Whois...right?

You don't want to know how much spam I get on
"thisipspaceisnotforsale@cluecentral.net". Including, ironically, from IPv4
brokers.

Obviously, that email address is not being used for my Amazon account.

Thanks,

Sabri

9

Sabri -

Please forward each solicitation (in full with headers) to us via <compliance@ arin.net>

(Unique emails that are only used in the Whois entry are the easiest violations to pursue by far - so reporting such activity can make a huge difference.)

Thanks!
/John

John Curran
President and CEO
American Registry for Internet Numbers

10

Wouldn’t hurt to associate that email (and perhaps some more honeypot addresses at other domains with some orgids and assign them some resources. Might as well cut out the middleman and have the violators rat themselves out…

-r

11

RS -

There are some “salted” entries at present, but the level of abuse experienced drops off fairly quickly after initial insertion.

/John

John Curran
President and CEO
American Registry for Internet Numbers