Internetworkers: http://www.ibiblio.org/internetworkers/

[Steven Champeon <schampeo AT hesketh.com>]

on Thu, Jan 15, 2009 at 02:07:58PM -0500, Michael Czeiszperger wrote:
> I've got someone working their way through the list of copyright 
> infringements, and he found our entire site has been duplicated to a 
> misspelled version of our domain name!  Its identical except for the 
> contact information and ads at the bottom, which is the most likely 
> motivation. Its hosted off-shore, so I assume copyright laws don't apply, 
> damn it.

Offshore? It's at High Speed Web, in Rock Hill, SC.

$ host webperformaceinc.com
webperformaceinc.com is an alias for ellingwood.goodaddress.eu.
ellingwood.goodaddress.eu has address 69.51.10.205

$ whois 69.51.10.205
BW whois 5.0 by Bill Weinman (http://whois.bw.org/)
Copyright 1999-2006 William E. Weinman
Request: 69.51.10.205
connected to whois.arin.net [192.149.252.44:43] ... 

OrgName:    High Speed Web/Genesis 2 Networks 
OrgID:      WILDW-5
Address:    328 Willowbrook Ave.
City:       Rock Hill
StateProv:  SC
PostalCode: 29730
Country:    US

NetRange:   69.51.0.0 - 69.51.31.255 
CIDR:       69.51.0.0/19 
OriginAS:   AS8175
NetName:    HIGHSPEEDWEB
NetHandle:  NET-69-51-0-0-1
Parent:     NET-69-0-0-0-0
NetType:    Direct Allocation
NameServer: NS3.HIGHSPEEDWEB.NET
NameServer: NS4.HIGHSPEEDWEB.NET
Comment:    
RegDate:    2003-05-30
Updated:    2008-07-17

RAbuseHandle: NOC2799-ARIN
RAbuseName:   Network Operations Center 
RAbusePhone:  +1-800-498-8054
RAbuseEmail:  noc AT highspeedweb.net 

RNOCHandle: NOC2799-ARIN
RNOCName:   Network Operations Center 
RNOCPhone:  +1-800-498-8054
RNOCEmail:  noc AT highspeedweb.net 

RTechHandle: NOC2799-ARIN
RTechName:   Network Operations Center 
RTechPhone:  +1-800-498-8054
RTechEmail:  noc AT highspeedweb.net 

OrgAbuseHandle: NOC2799-ARIN
OrgAbuseName:   Network Operations Center 
OrgAbusePhone:  +1-800-498-8054
OrgAbuseEmail:  noc AT highspeedweb.net

OrgTechHandle: NOC2799-ARIN
OrgTechName:   Network Operations Center 
OrgTechPhone:  +1-800-498-8054
OrgTechEmail:  noc AT highspeedweb.net

# ARIN WHOIS database, last updated 2009-01-15 07:08
# Enter ? for additional hints on searching ARIN's WHOIS database.

$ whois webperformaceinc.com
BW whois 5.0 by Bill Weinman (http://whois.bw.org/)
Copyright 1999-2006 William E. Weinman
Request: webperformaceinc.com
whois server for *.com is whois.crsnic.net ...
connected to whois.crsnic.net [199.7.52.74:43] ... 
connected to whois.enom.com [69.64.157.42:43] ... 
=-=-=-=
Visit AboutUs.org for more information about webperformaceinc.com
<a href="http://www.aboutus.org/webperformaceinc.com";>AboutUs: 
webperformaceinc.com</a>

Registration Service Provided By: Gold-Domain, Inc.
Contact: support AT gold-domain.com
Visit: http://www.gold-domain.com
           
Domain name: webperformaceinc.com

Registrant Contact:
   webperformaceinc.com
   Tom Ellingwood ()
   
   Fax: 
   2549 Noriega Street #203
   San Francisco, CA 94122
   US

Administrative Contact:
   webperformaceinc.com
   Tom Ellingwood (info AT webperformaceinc.com)
   +1.8976652141
   Fax: +1.8976652142
   2549 Noriega Street #203
   San Francisco, CA 94122
   US

Technical Contact:
   webperformaceinc.com
   Tom Ellingwood (info AT webperformaceinc.com)
   +1.8976652141
   Fax: +1.8976652142
   2549 Noriega Street #203
   San Francisco, CA 94122
   US

Status: Active

Name Servers:
   dns1.name-services.com
   dns2.name-services.com
   dns3.name-services.com
   dns4.name-services.com
   dns5.name-services.com
   
Creation date: 10 Mar 2008 16:17:14
Expiration date: 10 Mar 2009 16:17:14

Looks like a rental mailbox in Chinatown, SF, CA. 2549 Noriega is
between a Vietnamese restaurant ("Tay Giang", at 2543 Noriega) and
a supermarket ("J L Supermarket", at 2551 Noriega); maybe you could
call either of them to confirm, or get a number for the mailbox
rental place. Alternately, it's not a mailbox place but rather an
office building - there's a few pages pointing to that address as
a mortgage place:

 http://www.grayboxx.com/c/b/16213093.html

But there are lots of other businesses with similar addresses, so
<shrug> hard to say. Street View suggests it is a two-story building,
and I haven't seen any suite numbers above the 200s:

http://maps.google.com/maps?f=q&source=s_q&hl=en&geocode=&q=2549+Noriega+Street+94122&sll=37.753344,-122.490692&sspn=0.009026,0.01929&ie=UTF8&ll=37.753615,-122.491229&spn=0,359.972556&z=16&iwloc=addr&layer=c&cbll=37.753613,-122.491114&panoid=iFu95quEow3T1Reo02iivw&cbp=12,176.12524078836316,,0,-1.559345732071403

For example:

 http://whois.domaintools.com/groupword.com

says it's registered to a "Steven Miller" at that same address, 
but his phone as given is +86, which is China. Note they also own
another hundred or so domains.

The phone number is bogus (no 897 area code) or typo'd (not unusual -
whois is a farce). There's a distinct possibility that this is
just a forged whois record.

Anyway, try to get it taken down with a DCMA takedown notice to
High Speed Web.

-- 
hesketh.com/inc. v: +1(919)834-2552 f: +1(919)834-2553 w: http://hesketh.com/
antispam news, solutions for sendmail, exim, postfix: http://enemieslist.com/