Petroliam Nasional Berhad v. GoDaddy.com, Inc.
Filing
124
Declaration of Nima Kelly in Support of 119 Administrative Motion to File Under Seal Motion for Partial Summary Judgment and Appendix in Support filed byGoDaddy.com, Inc.. (Attachments: # 1 Declaration Greg Schwimer ISO Plaintiff's Administrative Motion to Seal, # 2 Proposed Order, # 3 Exhibit A Part 1 to Proposed Order, # 4 Exhibit A Part 2 to Proposed Order, # 5 Exhibit A Part 3 to Proposed Order, # 6 Exhibit A Part 4 to Proposed Order, # 7 Exhibit A Part 5 to Proposed Order, # 8 Exhibit A Part 6 to Proposed Order, # 9 Exhibit A Part 7 to Proposed Order)(Related document(s) 119 ) (Slafsky, John) (Filed on 11/9/2011)
lnternetArchiveWavbackMachine
PageI ofl
fiIfifi$ffi$fr${ffi$f,lfinil
:i:r:L?..ts.F;.q,,ff
Searched for
*u
"['..,.,j
search cornpa Archivepases
re
.carnfunchat.com
77 Results
Note some duplicates are not shown, See all.
x denotes when site was updated.
Material typically becomes available here 6 months after collection. See FAQ,
SearchResultsfor Jan 01, 1996- Jun 25, 2009
1996 1997 1998 1999 2000
2001
2002
2003
2004
2005
2006
2007
2008 2009
0
0
0
0
0
0
16 pages
19 pages
9 pages
6 pages
6 pages
13 pages
5 pages
pages pagespages pages pages 2 pages
pages
*1 a n 2 1 . 2 O O 2J a n 2 8 . 2 0 0 3J a n 2 2 . 2 0 0 4 F e b 0 6 . 2 0 0 5 * O c t 0 6 . 2 0 0J a n 0 5 . 2 0 0 7 * J a n 0 4 , 2 0 0 8
J
*
*
Ju|25.200
*
6*
Apr02.2007
Jun07.2007*
Auo07.2007
Nov04.2007
Dec04.2007
Home I Help
InternetArchive I Terms of Use I PrivacvPolicv
APP098
http://web,
archive. glweb*/http://www.camfunchat.
or
I
com
CONFIDENTIAL
1212U2009
GD-000616
Internet
ArchiveWavbackMachine
""
Enter Address:
Web
:ditp;i
PageI of 1
I ilti
Takg.Me..
BaCI{,,',,',,,,i Search
Adv.
*
ri..iiiiiitrrririiirriii
r r.
!.aii!r
ilti
Compare Archive Pages
pet
Sea d for hftp:llwww. ronastowe
rche
r.net
1O Results
x denoteswhen site was updated,
Materialtypicallybecomesavailablehere 6 months after collection.
SeeFAe.
for
SearchResults Jan 01, 1996- Jun 25,2009
1996 1997 1998 1999 2000 2001 2002
0
0
0
0
0
0
0
pages
pages g e s a g e s a g e s a g e s .i .,
pa
p
p
p
p
2003
2004
2005
4 pages
1 pages
1 pages
2007 2008 2009
0
0
0
4 pages pages
pages
pages
2006
x
x
Jul13,2003 Jun07,2004 04,2005 Feb17,2006x
Feb
Home I Help
Internet
Archive I Termsof Use I PrivacvPolicv
APP099
http'.Iw eb.
I
v
archi e.org/web * lhttp'.I www.petronastower.et
I
I
n
CONFIDENTIAL
1212U2009
GD-000617
Whols Search
Results
PageI of2
2417Sales & Support (480) 505-8877
Geate AccoJnt I Foroot Passrord I Sion Out
HoME
Domains
Hosting
Email
^"r"Jli|lt
Site Builders
Business
Deals the Day
of
MarKerprace
empty
usD
Support&
codrinunity
SSL Certificates
Bob's Video
Btog
Meola
My
Account
WHOIS
Domain
Check
Resellers
PETRONASTOWER.NET
Show MyProducts
All
Checkto addthesealternate
PEIROwASfOt,lrER
domainnames.
[
sAvEt !
.tNro $0.89'ry1
Select All
.ono $9.9e',yf
sAVEr E .ME $s.swyr
sAvrr ! .uost $7.ss.,Vr
sAvEt [
snver ! .etz $e.ee',yr
snver
.US $e.sary,
Gheck to add these similar PEIROITIISI OWER.NETdomain names.
YOU can negotiate anything.
I quick tips for doing it right.
Plus... a Smoking Hot Blonde!
"lnformaliveand to the point .." - Belinda
$9.99*4/rS{VEr MYPETRONASTOWER
N..
E THEPETRONASTOWER...
E
Select All
$999. /rSAVEr E NEWPETRONASTOWER. gg?rSAVEt
$9
$9.99*4/TSAVEIBESTPETRONASTOWER..
$9.99-/YTSAVEISPETRONASTOWER.NE..,
E FREEPETRONASTOWER.
$9.99*/YTSAVEI
E
E
NET
E ..RoNASTowERsrE
.
$9.99'4/rsAVEl sreeerRor,rAsTowER.
I
$9.99.,ysAVEr .RoNASToWERoNL|NE.NET $999-ryr
f]
SAVEI
E out tnepernoNAsTow... $9.99*/yrSAVE| ...ROT.TRSTOWERSTORE.NET
$9.99*lyrSAVE| STOREPETRONASTOWE...
$e.99'/yrSAVE!
!
E
Check to add these Premium domain names. ffi
Sehct All
!
MarvelTower.corn$480.00
I
TowerMaintenance.corn
$995.00
I
gToaer.com94,995.00
Lightnin
I
g.com $1,588.00
TowerAdvertisin
!
To,rrerApartments.com
$2,388.00
I
TowerBroodcasting,com
$1,588O0
tj iiiiii??
$1.99* OMATNS
D
i i i i i i i j i I i I i ??i: I
:i:::::l
l:::::::;9*#:ll{i.:{i*F.:f
!#4!
'Plus ICANN tus of
$0.18 per domsin nme yeil
".CA dffiain namgs will b€ registsBd hrough Go Daddy Domains Canada, Inc., a CIRA certified rogisbar
No quantitylimitlWith every
product buy*
you
new,non-domain
Interested in this
domain name?
helpyouget it.
$1.99 Domain Names
World-Class Web Hosting
featurinq
99.90.6
uptime.
fee setu
APP100
http:II who.godaddycom/lVhols.aspx? ain-p etron
.
dom
astower.
net&prog i d-g odad
dy
CONFIDENTIAL
1212U2009
GD-000618
Whols Search
Results
Page2 of 2
The datacontained GoDaddy
in
com,lnc.'s\rVHOlS
database,
whilebelieved the company be reliable, provided is"
by
to
is
"as
with no guarantee warranties
or
regardingits accuracy.
This
information provided the sole purposeof assisting
is
for
you
in obtaininginformation
aboutdomainnameregistration
records.
Any use of this data for any other purposeis expressly
forbidden
withoutthe priorwritten
permission GoDaddy.com, By submitting inquiry,
of
Inc.
an
you agreeto thesetermsof usageand limitations warranty.In particular,
of
you agree not to use this data to allow,enable,or otherwisemake possible,
dissemination collectionof this data, in part or in its entirety,for any
or
purpose,
suchas the transmission unsolicited
of
advertising
and
solicitations any kind,including
of
spam You further
agree
not to use this data to enablehighvolume,automated roboticelectronic
or
processes
designed collect compile datafor any purpose,
to
or
this
including
purposes.
mining
this datafor yourown personal mmmercial
or
Pleasenote:the registrant the domainname is specified
of
in the "registranf'field. mostcases,
In
GoDaddy.com,
Inc.
is not the registrant domainnameslistedin this database.
of
Registrant:
DavidDaash
AvenidaLazaro
Colonia
Las Brisas
Mexico.Mexico64780
Mexico
Registered
through:GoDaddy.com, (http://wwv.godaddy.com)
Inc.
Domain
Name:PETRONASTOWER.
NET
Createdon: 08'May-03
Erpireson: 08-May-10
Last Updatedon: 02-May-09
Administrative
Contact:
Schoenekess,
Heikoddd_privat@hotmail
com
BPM195226
372 OId Skeet
London,
London
ECI V 9AU
UnitedKingdom
+44.2076636606
TechnicalContact:
Schoenekess,
Heikoddd_privat@hotmail.com
BPM195226
372 Old Skeet
London,
LondonECI V 9AU
United
Kingdom
+44 2076636606
Domainserversin listedorder:
NSSg.DOMAI NTROL.COM
NCO
NS4O.
DOMAI
NCONTROL.COM
RegistryStatus:clientDeleteProhibited
RegistryStatus:clientRenewProhibited
RegistryStatus:clientTransferProhibited
RegistryStatus:clientUpdateProhibited
See Underlying
RegistryData
ReoortInvalid
Whois
Sign up forspEcial offers:
Account Manager
My Account
My Renewals
My Upgrades
Accounl Settings
Grstomer lnformation
Order History
Geate Accounl
Enteryouremail addres€
Shopping
* Offer Disclaimers
Domain Seardr
ProductCatalog
ProductAdvlsor
Gift Cards
co Daddy Mobile
Todat's Offers
Resources
\tVebmail
\A/FlOlSsearcfr
ICANN Contrmation
Affiliates
Connec{ with Us
Gadgets/Wdgets
Site Map
HelpandSupport
Telephone
Support Sales
&
Billing
Supporl
Email Support
Our
Team
Frequenty
AskedQuestlons
UsefsGuides
Report
Spam
TestOurProducts
About Go Daddy
Careers
Security Center
Company Info
News Center
Customer Testimonials
Vvhat's New
Legal
Markeling Propomls
GoDaddy.com is the world's No. 1 |CANN-accredited domain name regisfar for .COM, NET, ORG, INFO, .BlZ and US domain extensions. Source: RegistrarsTATs.com
Copyright @ 1999 - 2009 coDaddy.com, Inc. All rights reserved.
APP101
http: I who.
godaddy.
I
com/Whols.
aspx?
domain-petronastower.
net&prog_i
d:godaddy
CONFIDENTIAL
1212112009
GD-000619
eNom- domainname,web sitehosting,email,registration
PageI of4
Become a domain reseller todav! Learn More
Register
Transfer
Register Domain
A
Domains Hosting
Email
SSL Certificates More Products
Resellers
Get Started
My Cart
>
> WhoisSearch
Hp-n-q Dp_m-arru
Yi-ew.our -v lib.ra.ry.
hp.lp.idep.
Search
WhoisRecords
ilitiif{iili::il{fji::t:llffi{:i:i:]i11
Enter domain search
a
to
*f'.ffi'ffiW",##ij$
Featured
domainnames
Premium Domains
.TV
i" morning.tv
$4,500 i ,rose.tv
$5,000
l"'industry.tv
$5,000 i"',keith.w
$1,750
i"'goodwill.tv
$5,000 i"'pueblo.tv
$4,500
Y-l-ew-In-pr-e
Exclusively at NameJet
efd05,p.o.m
phppryithjat.aanil
*i;1ll
l:d:1:
Youmaybe interested these
in
APP102
http://www.
enom.
comiwhoisidefault.
aspx?DomainName-camfunchat.
com
CONFIDENTIAL
1212U2009
GD-000620
eNom- domainname,web sitehosting,email,registration
RelatedDomains
i
f
"
"'
Page2 of 4
Premium Domains
.TV
cam ngossip.com
i"' funchat.tv
camgameschat.com
j
concierge.tv
l"' riverfunchat.com
i"' sarah.tv
i'"' camfunconfab.com
i"' postcard.tv
i'-' camhumourchat.com
l''' benefit.tv
Y-ie-w-mpr-e
s100
$1,000
$s00
$1,000
$500
View more
Backorder at NameJet
sunchase-solar.com
c
unchaxtE
d:ga.l!s.ry. om.
bunchable.com
funchaldowntownbris com
a.
outrunchalet.com
Vlew more
The best products available!
Domains
,iii;ii;;,;i:ii:i:i:i:i:
or
a
.iilji;i1i.ii;ii Resister transfer domain
name
,*Enht
4i*:iilL#
';iitiii.'".'.'""" PfOtgCt
lD
qn
, ..i]iii Kp..ep.yqur.ds.marr(.s).Hfo.ffBf
ffi
ffiffi
Privat-e.
RichContent
eonJcxlrplly.
r.elplanL
cqolc-nL
fo..r
y.oxr.w-ebB.ite.
SSL Gertificates
Web Hosting
PowerfrrlWindows@ Linux
&
F.eatunrrg.Y-.sn$.igru.s.-E$.&.Qp.o.Trust
plallo.nns.
SSL certificates
Business
Listing
y.o.r.{
Sptfu
snd..U-.{!.each.the.p.ascr..o.f
domain
it+iiffi pop Email
i.'',
iiijl,,, g;i $g-sgle- -cpa-m:prqt-e-o!-ed
-4{d-e-m-atl
'flfi$iifi.l..fs
Web Site Creator
qkir-g -srt-E-H
Buld.a.
er-e.a!.!s -w-eb
minutes
Instant Mobilizer
y-o.Br.site
C-r-ea-tc--a.msb.ile.v.e.ni-o,n.-o-f
ffihiffi
in seconds
Adding value with branded services
" RatePoint
ffi*Hw,g*F*r*,ff
i\i:'r:)i:':'''
:;::i:"':::i:i:i::::
grow bruiness'
their Get
t*HflJ;,Hi;:?';*Ttifr,lHiJ.,lJ#'i:f,1"f:iT1i'#,5.LTi:tT#
APP103
http://www.
enom.
com/whoi
s/default.
aspx?DomainName-camfunchat.
com
CONFIDENTIAL
r212U2009
GD-00a621
eNom- domainname,web sitehosting,email,registration
Page of4
3
WHOISInformation
Visit AboutUs.org for more information about ca.mfu.a-s_h_al-c.o.m
Ab.s.u1Us.l.-c.aefu
nshaL.e.o.
m
Registrant:
nJa
Heiko Schoenekess
BPM 195226
372 Old Street
London London ECIV 9AU GB
Get Noticed on the Internet! Increasevisibility for this domain name by listing it at .Wt!flry,W.hgit-'hU-surg.l.SlipJlltg!,g9Ul
Administrative:
nla
Heiko Schoenekess
BPM r9s226
372 Old Street
London London ECIV gAU GB
t u i*r ri rr
"ht!p://w.uJ.org/Tp/htrt
r,ive
Vid6o ch6t
!@s=i1001,
slc='thttp://lw.cafunchat,cm.
rranebo!d€!='.0"
norest26
/>
- sery
Iiv6
C.ngi!1s
adult
lt6b c.G
and chat.
fldebord6!-nOn
Nud€ s€ly
cdgllts,
t€6ns,
fesbiaNr
voy6ur,
coupt6s,
dat€ut
vid€o
ad
chat..'>
/>
APP111
CONFIDENTIAL
GD-000629
APP112
APP113
From:
Sent:
To:
Cc:
Subject:
Emergency
Response
Team
Malaysi Computer
org.
a
Wednesday,
December
2,20098:16PM
abuse@godaddy.com
soc@us-cert.gov
9
Re: [MyCERT-200 l20l 1065922]: ReportingIncident : Domain Infringement
--..-BEGIN
PGPSIGNED
MESSAGE--.-Hash:
SHA1
DearAbuse
Team,
MyCERT
a
received report
a
from an organization
regarding domainregistered
underyouradministration hosta fakewebsite the original
website
which
that
of
is can be foundat v\ n A/.petronas.com.
Domainpetronastower.net
:
petronastower.
net
URL : http://vrrunr.
lP : 64.202.189.170
Domain
Name:
PETRONASTOWER.NET
Registrar:
GODADDY.COM,
lNC.
godaddy.
\MtoisServer:
whois.
com
Referral
URL:http://registrar.godaddy.com
NameServer:
NS39.
DOMAI
NCONTROL.COM
NameServer:
NS40.DOMAINCONTROL.COM
Status clientDeleteProh
:
ibited
clientRenewProh
Status:
ibited
Status clientTransferProh
:
ibited
pdateProh
:
ibited
Status clientU
Updated
Date:02-may-2009
Creation
Date:08-may-2003
Expiration
Date:08-may-2910
pornographic contents
The domain hosting
is
web
fromhttp://unnnr.camfunchat.com
purposes this can createa likelihood
of
whichcan be usedforfraudulent
and
confusion theirclients.
to
As of at thistime,MyCERT
site
has confirmed the abovedisputed is still
that
yourassistance investigate the above
activeonline. wouldappreciate
to
on
We
siteandto closethe domain soonas possible.
as
your prompt
We appreaciate
response.
Kindly
to
retain abovesubject
the
header
containing:[MyCERT-200912411065922]
ensureeffective
response.
Regards,
- -Juanita
---lnrliala---U UI IL'ID-
Inc.
OrgName:
GoDaddy.com,
OrglD:
GODAD
Address:
14455N Hayden
Road
Address:
Suite226
City:Scottsdale
StateProv:
AZ
APP114
CONFIDENTIAL
GD-001804
PostalCode:
85260
Country:
US
ge:
NetRan 64.202.160.0 64.202.91.255
1
CIDR:
64.202.160.0/19
NetName:
E-l
GO-DAD
DY-SOFTWAR NC
NetHandle:
NET-64-202-1
60-0-1
Parent:
NET-64-0-0-0-0
NetType.
Direct
Allocation
NameServer: 1.SECURESERVER.
NET
CNS
NameServer:
CNS2.SECURESERVER.
NET
NameServer:
NET
CNS3.SECURESERVER.
Comment:
RegDate:
2OO2-10-22
Updated:
2007-06-14
OrgAbuseHandABUSE5-ARl
le:
1
N
OrgAbuseName:
AbuseDepartment
+
OrgAbusePhone:1-480-624-2505
OrgAbuseEmail
: abuse@godaddy.com
OrgNOCHandle: 124-ARl
NOC
N
OrgNOCName:
Network
Operations
Center
+1
OrgNOCPhone: -480-505-8809
Org OCEmailnoc@godaddy.com
N
:
OrgTechHandle: 124-ARIN
NOC
OrgTechName:
Network
Center
Operations
+1
OrgTechPhone: -480-505-8809
OrgTech
Email noc@godaddy.com
:
Malaysia
Emergency I E-mail:
mycert@mycert.org.my
Computer
Response
Team
Hotline: 300 88 2999
1
Cyber999
I
(MyCERT)
| Fax:(603)89453442
(603)89926969
CyberSecurity
Malaysia
I Phone:
Level7, Sapura@Mines
hour:0830-1730
MYT(Mon-Fri)
I Office
7, Jln Tasik,
5850
The Mines
24x7Phone:
019-266
|
Resort
43300SeriKembanganSMS:019-281
3801
City,
I
Selangor.
MALAYSIA
I URL:http://mycert.org.my/
Disclaimer:
The information
sentfrommycert.org.my
transmitted electronic
in
mailmessages
person(s) entity(ies)
domainis intended
onlyfor the
or
to
whichit is addressed,
the
and may contain
represents views/points MyCERT
of
information
issues.
extracted
fromvarious
otherreliable
sources security
on
MyCERT
therefore
doesnot acceptliability any errors, omissions the
or
in
for
contents thismessage,
of
transmission
and
whichariseas a result e-mail
of
provided.
consequences to mis-applying the technical
lf
due
of
solutions/steps
you havereceived emailby mistake,
please
at
this
notifyMyCERT +60389926969
or emailus at mycert@mycert.org.my
.-.--BEGIN
PGPSIGNATURE-.-.Version:
GnuPG
vZ.A.1 (FreeBSD)
1
APP115
CONFIDENTIAL
GD-001805
po
g
iEYEARECAAYFAkSXO3SAGkQO FclK27XH9RwCghzO2hhS1VOG
NYAQ9Xvku M/
BA
+dSeHh
KkcAn UqPZc+l UExUMX1
R2q
N
s/D
=lbOn
-.---END
PGPSIGNATURE--...
APP116
CONFIDENTIAL
GD-001806
From:
Sent:
To:
Cc:
Subject:
soc@us-cert.gov
December
2,20098:39PM
Wednesday,
abuse@godaddy.com
soc@us-cert.gov
Follow-Upfor US-CERTIncident
number
INC000000066795
US-CERT requesting
is
in
which
assistance removing activemalware beinghosted
an
site
within yow netblock
greatlyappreciate assistance terminating shutting site
your
affectour constituency.
would
in
or
this
US-CERT
down. destination
The
website hosting malicious andtheURL is active,
is
a
code
accessible hosting
and
'hxxp'with
malware. is thefirst attempt remove malicious
This
to
tlis
code
from thenetwork(please
replace
'http').Please
assist in a timely rernoval this IIRL from anyrelated
us
of
domains:
URL: hxxp//www[dot]petronastower.net
IP Address:
64.202.1,89.17
0
godaddy.com
Domains
hosted thisIP address:
on
Theowner/operator this website
of
mayor maynotbeaware website
maycontain
malicious
code.TheUSthis
CERTis requesting this website removed
from publicaccess theowner/operator deleted
has
that
be
until
the
malicious
content.
Please
investigate traffrcandreference
this
INC000000066795
regarding host.USthis
CERTis interested leamingof theoutcome
in
ofyour investigation
VIR
TheUnitedStates
Computer
Emergency
Readiness
Team
Department Homeland
of
Security
National
Cyber
Division/Operations
Security
Phone:
1-888-282-0870
Arlington,Virginia
E-mail SOC@us-cert.gov
:
qov
Website:
www.us-cert.
EmailAttaohment
:
APP117
CONFIDENTIAL
GD-001807
From:
Sent:
To:
Subject:
AbuseDepartment
GoDaddy
Thursday,
1:16PM
December 20Q9
3,
DaddySOC
Go
INC000000066795]
[FWD: Follow-Upfor US-CERTlncidentnumber
Attention SOC,
We have been notifiedof a possiblebreachof security.pleasereviewthe messagewe have forwardedto
you from the complainant.
you determine
If, after investigating situation,
this customer
or
this
that no actionshouldbe taken against
pleasereplyto this message the AbuseDepartment respond the
you needmore information
will
to
and
(if
complainant necessary) closeout the issue.
or
If you determine
from Go Daddyplease
take the appropriate
course
that this situationmeritsa response
of actionbased your SOP,
on
Thankyou for investigating complaint.
this
Sincerely,
Spamand AbuseDepartment
GoDaddy.com
24/7 Abuse
Department
Hotline:480-624-2505
ARID1019
Message
Original
Subject:
Follow-Up US-CERT
for
Incident
numberINC000000066795
From:soc@us-cert.gov
Date:Wed,December
42,20099:38 pm
To: abuse@godaddy.com
Cc: soc@us-cert.gov
t----I
tr_l is requesting
withinyour
in
site beinghosted
US-CERT
assistance removing activemalware
an
your assistance
in
netblock
wouldgreatlyappreciate
whichaffectour constituency.
US-CERT
is
website hosting malicious
a
codeand
terminating shutting
or
this site down,The destination
This is the first attemptto removethis
the URLis active,accessible hostingmalware.
and
'hxxp'with 'http').Please
malicious
replace
assistus in a timely
codefrom the network(please
removal this URL
from any related
of
domains:
net
URL: h>o
GoDaddyAbuseDepartment
Go DaddySOC
RE: [FWD: Follow-Upfor US-CERTIncident
number
INC000000066795]
Abuse,
Reviewing domain
this
whichis served
contains
a
complaint| found it is hosted parkwobAndlhe index.html
that
on
of
fame srcreference carnfunchat.com, appears be an adult
to
which
to
site. I seeno indicalion thedomain
that
petronastower.net
contains malicious
any
code.
Name: oetronastower.net
Address:
64.202.189.170
Name: p,fwd-!O1
.prod.mesa1
.secureseryer.net
Address:
64.202.1
89.170
$ wgetpetronastower.net
-2005-12-03
21:40:31- htto://oetron
astowe nev
r.
petronastower.net...
Resolving
64.202.1
89.170
Connecting petronastower.netl64.202.1
to
89.1
701:80...
connected.
HTTP
request
sent,
awaiting
rcsponse... OK
200
Length: 5 [te]d/htmll
81
Saving
to:'index.html'
'LIAA/3C//DTD 4.01//EN'
wlvw.w3.oro/TRYhtm
"http:/
Live Video Chat - hot Webcams - Sexy Camgids
Disclaimer: Justia Dockets & Filings provides public litigation records from the federal appellate and district courts. These filings and docket sheets should not be considered findings of fact or liability, nor do they necessarily reflect the view of Justia.
Why Is My Information Online?