People trying to sell "ARIN Leads"
Does anyone else get email offers like the below? I get them at least once a week from various companies I've never heard of, I'm sure they pop up under different names constantly for obvious reasons. Crap like this I imagine is why a few of my POC emails listed on my ARIN assets get constant spam, I can't imagine how many places there are like this scraping then selling ARIN data to marketing outlets. name and email in the below *not* scrubbed for anonymity because they need to cut this shit out -------- Forwarded Message -------- Subject: Re: American Registry for Internet Numbers (ARIN) Leads 2022 2 Date: Thu, 7 Apr 2022 12:16:02 +0000 From: Julie Levay <julie.levay@hoversamerica.com> To: jon@fohdeesha.com <jon@fohdeesha.com> Hi, Good Day! Would you be interested in acquiring contacts of *below?* *_Lists Contains:_**Operator/Carrier/Service Provider, VAR / Systems Integrator, Device Manufacturerr, Infrastructure Provider, Consultant, Software / Application Development, Telecom Software Provider, Gov't/ Utility / Enterprise, Telecom Equipment Manufacturer, Business and Technology Leaders, CTOs, Channel & Partner Managers, Business Development Managers, Analysts & Infrastructure Teams from Cloud Service Providers, Telecommunications, ISPs, ISVs and the IT Channel and Industry serving the cloud community *and more. *_We provide information like-_*Name, Email, Title, Phone Number and Company Details Please let me know you’re below requirements in detail so that I can provide Counts and test file for your review. *Target Industry: ____________________??* *Target Geography: ________________??* *Waiting for your response.* *Regards,* *Julie Levay* *Demand Generation Specialists.* * * -- Jon Sands MFI Labs https://fohdeesha.com/
Jon - You can forward such solicitations to compliance@arin.net<mailto:compliance@arin.net> - we’ll send them an appropriate nasty letter. Definitely send any solicitation of unique contact data on Whois records to us - we do pursue misuse aggressively. (With regard to this particular spam, I’d note there is an entire ecosystem of these “lead/demand” companies, and they aren’t generally selling the ARIN Whois data but instead contact data that’s been extracted from conference registration/attendee lists. In this case I’d imagine you got targeted for receipt because your email has posted to the nanog mailing list recently.) Thanks! /John John Curran President and CEO American Registry for Internet Numbers On 8 Apr 2022, at 12:46 AM, Jon Sands <fohdeesha@gmail.com<mailto:fohdeesha@gmail.com>> wrote: Does anyone else get email offers like the below? I get them at least once a week from various companies I've never heard of, I'm sure they pop up under different names constantly for obvious reasons. Crap like this I imagine is why a few of my POC emails listed on my ARIN assets get constant spam, I can't imagine how many places there are like this scraping then selling ARIN data to marketing outlets. name and email in the below *not* scrubbed for anonymity because they need to cut this shit out -------- Forwarded Message -------- Subject: Re: American Registry for Internet Numbers (ARIN) Leads 2022 2 Date: Thu, 7 Apr 2022 12:16:02 +0000 From: Julie Levay <julie.levay@hoversamerica.com><mailto:julie.levay@hoversamerica.com> To: jon@fohdeesha.com<mailto:jon@fohdeesha.com> <jon@fohdeesha.com><mailto:jon@fohdeesha.com> Hi, Good Day! Would you be interested in acquiring contacts of below? Lists Contains: Operator/Carrier/Service Provider, VAR / Systems Integrator, Device Manufacturerr, Infrastructure Provider, Consultant, Software / Application Development, Telecom Software Provider, Gov't/ Utility / Enterprise, Telecom Equipment Manufacturer, Business and Technology Leaders, CTOs, Channel & Partner Managers, Business Development Managers, Analysts & Infrastructure Teams from Cloud Service Providers, Telecommunications, ISPs, ISVs and the IT Channel and Industry serving the cloud community and more. We provide information like-Name, Email, Title, Phone Number and Company Details Please let me know you’re below requirements in detail so that I can provide Counts and test file for your review. Target Industry: ____________________?? Target Geography: ________________?? Waiting for your response. Regards, Julie Levay Demand Generation Specialists. -- Jon Sands MFI Labs https://fohdeesha.com/
Of course, plausible deniability goes out the window when you receive sales emails on an address that ONLY exists in ARIN Whois. But no one would put a "canary trap" email in ARIN Whois...right? - Jima -- From: NANOG <nanog-bounces+nanog=jima.us@nanog.org> On Behalf Of John Curran Sent: Friday, April 8, 2022 05:03 To: Jon Sands <fohdeesha@gmail.com> Cc: NANOG list <nanog@nanog.org> Subject: Re: People trying to sell "ARIN Leads" Jon - You can forward such solicitations to mailto:compliance@arin.net - we’ll send them an appropriate nasty letter. Definitely send any solicitation of unique contact data on Whois records to us - we do pursue misuse aggressively. (With regard to this particular spam, I’d note there is an entire ecosystem of these “lead/demand” companies, and they aren’t generally selling the ARIN Whois data but instead contact data that’s been extracted from conference registration/attendee lists. In this case I’d imagine you got targeted for receipt because your email has posted to the nanog mailing list recently.) Thanks! /John John Curran President and CEO American Registry for Internet Numbers On 8 Apr 2022, at 12:46 AM, Jon Sands <mailto:fohdeesha@gmail.com> wrote: Does anyone else get email offers like the below? I get them at least once a week from various companies I've never heard of, I'm sure they pop up under different names constantly for obvious reasons. Crap like this I imagine is why a few of my POC emails listed on my ARIN assets get constant spam, I can't imagine how many places there are like this scraping then selling ARIN data to marketing outlets. name and email in the below *not* scrubbed for anonymity because they need to cut this shit out -------- Forwarded Message -------- Subject: Re: American Registry for Internet Numbers (ARIN) Leads 2022 2 Date: Thu, 7 Apr 2022 12:16:02 +0000 From: Julie Levay mailto:julie.levay@hoversamerica.com To: mailto:jon@fohdeesha.com mailto:jon@fohdeesha.com Hi, Good Day! Would you be interested in acquiring contacts of below? Lists Contains: Operator/Carrier/Service Provider, VAR / Systems Integrator, Device Manufacturerr, Infrastructure Provider, Consultant, Software / Application Development, Telecom Software Provider, Gov't/ Utility / Enterprise, Telecom Equipment Manufacturer, Business and Technology Leaders, CTOs, Channel & Partner Managers, Business Development Managers, Analysts & Infrastructure Teams from Cloud Service Providers, Telecommunications, ISPs, ISVs and the IT Channel and Industry serving the cloud community and more. We provide information like-Name, Email, Title, Phone Number and Company Details Please let me know you’re below requirements in detail so that I can provide Counts and test file for your review. Target Industry: ____________________?? Target Geography: ________________?? Waiting for your response. Regards, Julie Levay Demand Generation Specialists. -- Jon Sands MFI Labs https://fohdeesha.com/
On Apr 8, 2022, at 2:40 PM, nanog@jima.us wrote:
Of course, plausible deniability goes out the window when you receive sales emails on an address that ONLY exists in ARIN Whois.
But no one would put a "canary trap" email in ARIN Whois...right?
I know of nobody who would do any such thing. ;-) -r
----- On Apr 8, 2022, at 11:40 AM, nanog@jima.us wrote: Hi,
Of course, plausible deniability goes out the window when you receive sales emails on an address that ONLY exists in ARIN Whois.
But no one would put a "canary trap" email in ARIN Whois...right?
You don't want to know how much spam I get on "thisipspaceisnotforsale@cluecentral.net". Including, ironically, from IPv4 brokers. Obviously, that email address is not being used for my Amazon account. Thanks, Sabri
Sabri - Please forward each solicitation (in full with headers) to us via <compliance@ arin.net> (Unique emails that are only used in the Whois entry are the easiest violations to pursue by far - so reporting such activity can make a huge difference.) Thanks! /John John Curran President and CEO American Registry for Internet Numbers
On Apr 8, 2022, at 4:21 PM, Sabri Berisha <sabri@cluecentral.net> wrote:
----- On Apr 8, 2022, at 11:40 AM, nanog@jima.us wrote:
Hi,
Of course, plausible deniability goes out the window when you receive sales emails on an address that ONLY exists in ARIN Whois.
But no one would put a "canary trap" email in ARIN Whois...right?
You don't want to know how much spam I get on "thisipspaceisnotforsale@cluecentral.net". Including, ironically, from IPv4 brokers.
Obviously, that email address is not being used for my Amazon account.
Thanks,
Sabri
On Apr 8, 2022, at 19:01, John Curran <jcurran@arin.net> wrote:
Please forward each solicitation (in full with headers) to us via <compliance@ arin.net>
(Unique emails that are only used in the Whois entry are the easiest violations to pursue by far - so reporting such activity can make a huge difference.)
Wouldn’t hurt to associate that email (and perhaps some more honeypot addresses at other domains with some orgids and assign them some resources. Might as well cut out the middleman and have the violators rat themselves out… -r Sent from my iPad
On 8 Apr 2022, at 8:10 PM, Rob Seastrom <rs-lists@seastrom.com> wrote:
Wouldn’t hurt to associate that email (and perhaps some more honeypot addresses at other domains with some orgids and assign them some resources. Might as well cut out the middleman and have the violators rat themselves out…
RS - There are some “salted” entries at present, but the level of abuse experienced drops off fairly quickly after initial insertion. /John John Curran President and CEO American Registry for Internet Numbers
All the time. Note, their domain is hosted by Google and their email is hosted by Microsoft. Complaints to either provider tend to fall on deaf ears. If you reply asking for pricing, you'll likely be contacted from yet another domain. On Fri, 8 Apr 2022, Jon Sands wrote:
Does anyone else get email offers like the below? I get them at least once a week from various companies I've never heard of, I'm sure they pop up under different names constantly for obvious reasons. Crap like this I imagine is why a few of my POC emails listed on my ARIN assets get constant spam, I can't imagine how many places there are like this scraping then selling ARIN data to marketing outlets. name and email in the below *not* scrubbed for anonymity because they need to cut this shit out
-------- Forwarded Message -------- Subject: Re: American Registry for Internet Numbers (ARIN) Leads 2022 2 Date: Thu, 7 Apr 2022 12:16:02 +0000 From: Julie Levay <julie.levay@hoversamerica.com> To: jon@fohdeesha.com <jon@fohdeesha.com>
Hi,
Good Day!
Would you be interested in acquiring contacts of below?
Lists Contains: Operator/Carrier/Service Provider, VAR / Systems Integrator, Device Manufacturerr, Infrastructure Provider, Consultant, Software / Application Development, Telecom Software Provider, Gov't/ Utility / Enterprise, Telecom Equipment Manufacturer, Business and Technology Leaders, CTOs, Channel & Partner Managers, Business Development Managers, Analysts & Infrastructure Teams from Cloud Service Providers, Telecommunications, ISPs, ISVs and the IT Channel and Industry serving the cloud community and more.
We provide information like-Name, Email, Title, Phone Number and Company Details
Please let me know you’re below requirements in detail so that I can provide Counts and test file for your review.
Target Industry: ____________________??
Target Geography: ________________??
Waiting for your response.
Regards,
Julie Levay
Demand Generation Specialists.
-- Jon Sands MFI Labs https://fohdeesha.com/
---------------------------------------------------------------------- Jon Lewis, MCP :) | I route StackPath, Sr. Neteng | therefore you are _________ http://www.lewis.org/~jlewis/pgp for PGP public key_________
participants (8)
-
John Curran -
Jon Lewis -
Jon Sands -
nanog＠jima.us -
Randy Bush -
Rob Seastrom -
Sabri Berisha -
Tom Beecher