Petroliam Nasional Berhad v. GoDaddy.com, Inc.

Filing 124

Declaration of Nima Kelly in Support of 119 Administrative Motion to File Under Seal Motion for Partial Summary Judgment and Appendix in Support filed byGoDaddy.com, Inc.. (Attachments: # 1 Declaration Greg Schwimer ISO Plaintiff's Administrative Motion to Seal, # 2 Proposed Order, # 3 Exhibit A Part 1 to Proposed Order, # 4 Exhibit A Part 2 to Proposed Order, # 5 Exhibit A Part 3 to Proposed Order, # 6 Exhibit A Part 4 to Proposed Order, # 7 Exhibit A Part 5 to Proposed Order, # 8 Exhibit A Part 6 to Proposed Order, # 9 Exhibit A Part 7 to Proposed Order)(Related document(s) 119 ) (Slafsky, John) (Filed on 11/9/2011)

APP123

CONFIDENTIAL

GD-001813

From:
Sent:
To:
Cc:
Subject:

MalaysiaComputer
Emergency
Response
Team<[e-mail]>
Friday,December
4,2009 72:52ANI
[e-mail]
[e-mail]
Re: [MyCERT-2009120I10659221
Incident: DomainInfringement
: Reporting

--..-BEGIN
PGPSIGNED
MESSAGE.---Hash:
SHA1
[e-mail],
Regarding abovematter, problem stillnot yet rectified.
the
the
has
yourprompt
Appreciate
actionto rectify problem
the
immediately.
Kindly
retain abovesubject
the
header
containing:[MyCERT-200912011065922]
to
ensure
effective
response.
Regards,
- -Juanita
Malaysia
Emergency
Response
Computer
Team<[e-mail]. wrote:
my>
> DearAbuseTeam,
> MyCERT
received reportfroman organization
a
a
registered
regarding domain
> underyouradministration hosta fakewebsite the original
that
of
website
which
> is can be foundat M/vw.petronas.com.
> Domain:
petronastower.net
> URL : http:l/rlunu.
petronastower.net
> lP : 64.202.189.170
> Domain
Name:
PETRONASTOWER.NET
t Registrar:
lNC.
GODADDY.COM,
> Wrois Server:
whois.godaddy.com
> Referral
URL:http://registrar.godaddy.com
> NameServer:
NS39.DOMAINCONTROL.COM
> NameServer:
NS40.DOMAINCONTROL.COM
> Status:
clientDeleteProhibited
> Status:
clientRenewProhibited
> Status:
ibited
clientTransferProh
> Status:
clientUpdateProhibited
> Updated
Date:02-may-2009
> Creation
Date:08-may-2003
> Expiration
Date:08-may-2O1O
> The domain hosting
pornographic contents
is
web
fromhttp://unnnru.camfunchat.com
> whichcan be usedfor fraudulent
purposes thiscan createa likelihood
and
of
> confusion theirclients.
to
> As of at thistime,MyCERT
site
has confirmed the abovedisputed is still
that
APP124

CONFIDENTIAL

GD-001814

> active
yourassistanceinvestigate theabove
online. would
We
appreciate
on
to
> siteandto close domain soon possible.
the
as
as
> Weappreaciate prompt
your
response.
> Kindly
retain abovesubject
the
header
containing:[MyCERT-200912011065922]
to
> ensure
effective
response.
> Regards,
> -Juanita
\
-

--------

----l

,t rl^^:^-u ut lrrtD-

> OrgName:
lnc.
GoDaddy.com,
' O r g I D :G O D A D
> Address: 4455N HaydenRoad
1
> Address:
Suite226
> City:Scottsdale
> StateProv:
AZ
> PostalCode:
85260
> Country:
US
- 64.2A2.191
> NetRange:
64.202.160.0
.255
> CIDR:64.202.1
60.0/1
I
> NEtName:
NC
GO-DADDY-SOFTWARE-I
-2A2-160-0> NetHand NET-64
le:
1
> Parent:
NET-64-0-0-0-0
> NetType:
Direct
Allocation
> NameServer:
CNSl.SECURESERVER.NET
> NameServer:
CNS2.SECURESERVER.NET
> NameServer:
CNSS.SEGURESERVER.NET
> Comment:
> RegDate:
2002-10-22
> Updated:
2007-4644
-ARIN
> OrgAbuseHandle:
ABUSESl
> OrgAbuseName:
AbuseDepartment
> OrgAbusePhone:1-480+
624-2505
> OrgAbuseEmail:
[e-mail]
> OrgNOCHandle: C124-AR|
NO
N
> OrgNOCName:
Network
Operations
Center
> OrgNOCPhone: -480-505-8809
+1
> OrgNOCEmail:
[e-mail]
> OrgTechHandle:
NOCl24-ARIN
> OrgTechName:
Network
Operations
Center
> OrgTechPhone: -480-505-8809
+1
APP125

CONFIDENTIAL

GD-001815

> OrgTechEmail:
[e-mail]

\ ---- -----

> Malaysia
Emergency I E-mail:
[e-mail]
Computer
> Response
Team
Hotline: [phone]
1
I Cyber999
t (MyCERT)
Fax:[phone]
|
> CyberSecurity
(603)89926969
Malaysia
I Phone:
> Level7, Sapura@Mines
Office
hour:0830-1730
MYT(Mon-Fri)
I
> 7, JlnTasik,
The Mines
019-266
5850
| 24xTPhone:
> Resort
City,43300SeriKembanganSMS:019-281
3801
I
> Selangor.
MALAYSIA
I URL:http://mycert.org.my/
> Disclaimer.
> The information
transmitted electronic
in
sentfrom mycert.org.my
mailmessages
> domain intended for the person(s) entity(ies)
is
only
or
to
> whichit is addressed,
represents views/points MyCERT
the
of
and may contain
> information
extracted
fromvarious
otherreliable
sources security
on
issues.
> MyCERT
therefore
doesnot acceptliability any errors, omissions the
for
or
in
> contents this message,
of
whichariseas a resultof e-mail
and
transmission
> consequences to mis-applying thetechnical
provided.
due
of
solutions/steps
lf
> you havereceived emailby mistake,
please
at
this
notifyMyCERT [phone]
> or emailus at [e-mail]
------+-Malaysia
Computer
Emergency I E-mail:
[e-mail]
Response
Team
Hotline: [phone]
Cyber999
1
I
(MyCERT)
(603)8e453442
I Fax:
(603)89926969
CyberSecurity
Malaysia
I Phone:
Level7, Sapura@Mines
MYT(Mon-Fri)
Office
hour:0830-1730
I
7, JlnTasik,
The Mines
5850
019-266
| 24xTPhone:
Resoft
3801
City,43300SeriKembanganSMS:019-281
I
Selangor.
MALAYSIA
I URL:http://myceft.org.myl
Disclaimer:
The information
transmitted electronic
in
mailmessages
sentfrommycert.org.my
domain intended for the person(s) entity(ies)
is
only
or
to
whichit is addressed,
represents views/points MyCERT
the
of
and may contain
information
extracted
otherreliable
fromvarious
sources security
on
issues.
MyCERT
therefore
doesnot acceptliability any errors, omissions the
for
or
in
contents thismessage,
of
whichariseas a result e-mail
transmission
and
of
provided.
consequences to mis-applying the technical
due
of
lf
solutions/steps
you havereceived emailby mistake,
please
this
notifyMyCERT [phone]
at
or emailus at [e-mail]
---.-BEG PGPSIGNATURE----.
IN
Version:
(FreeBSD)
v2.0.11
GnUPG
iEUEARECAAYFAkSYzcEACg BAFcIK27XHaLQCXZM3le+6Me Pui3gRk2KAGj
kQO
bn9
rACfcR Dd6YLCq
RC
4FWlQZu OGSGSW=
sJ
=VqCM
APP126

CONFIDENTIAL

GD-001816

-----END
PGPSIGNATURE-.--.

APP127

CONFIDENTIAL

GD-001817

From:
Sent:
To:
Cc:
Subject:

Malaysia
Emergency
Computer
Response
Team<[e-mail]>
December
6,20096:03PM
Sunday,
[e-mail]
[e-mail]
Re: [MyCERT-200912011065922]
Incident: DomainInfringement
: Reporting

.-.-.BEGIN
PGPSIGNED
MESSAGE.....
Hash:
SHA1
[e-mail],
Regarding abovematter, seethatthe problem the reported
the
we
of
website
underyouradministrationstillnot beenrectified.
is
you.
Foryourinformation, is the second
this
timewe are notifying
your prompt
We appreciate
actionto rectify problem
the
immediately we need
as
to update complainant
our
accordingly.
Kindly
retain abovesubject
the
header
containlng:[MyCERT-2009120110659221to
ensure
effective
response.
Regards,
- -Juanita
Malaysia
Computer
Emergency
Response
Team<[e-mail]. wrote:
my>
> [e-mail],
> Regarding abovematter, problem stillnot yet rectified.
the
the
has
> Appreciate
yourprompt
action rectify problem
to
the
immediately.
> Kindly
retain abovesubject
the
header
containing:[MyCERT-20091201
10659221ta
> ensure
effective
response.
> Regards,
> -Juanita
> Malaysia
Emergency
Response
Team<[e-mail]>
wrote:
Computer
> > DearAbuse
Team,
t t MyCERT
received reportfroman organization
a
regarding domainregistered
a
> > under
youradministration hosta fakewebsite the original
that
of
website
which
> > is can be foundat vyvrruy.petronas.com.
> > Domain:
petronastower.net
> > URL : http://www.petronastower.net
> > lP :64.2A2189.170
> > Domain
Name:PETRONASTOWER.NET
APP128

CONFIDENTIAL

GD-001818

t t Registrar:
lNC.
GODADDY.COM,
> > Wtois Server:
whois.godaddy.com
> > Referral
URL:http://registrar.godaddy.com
> > NameServer:
NS39.DOMAINCONTROL.COM
> > NameServer:
NS40.DOMAINCONTROL.COM
> > Status:
clientDeleteProhibited
> > Status:
clientRenewProhibited
> > Status:
clientTransferProhibited
> > Status:
clientUpdateProhibited
t t Updated
Date:02-may-2009
> > Creation
Date:08-may-2003
t t Expiration
Date:08-may-2010
> > The domain hosting
pornographic contents
is
fromhttp://urunru,camfunchat.com
web
> > whichcan be usedforfraudulent
purposes thiscancreate likelihood
and
a
of
> > confusion theirclients.
to
> > As of at thistime,MyCERT confirmed the abovedisputed is still
has
that
site
> > activeonline. wouldappreciate
yourassistance investigate the above
We
to
on
> > siteandto closethe domain soonas possible.
as
> > We appreaciate
your promptresponse.
> > Kindly
retain abovesubject
the
header
containing:[MyCERT-20091
2A11065922]
to
> > ensure
effective
response.
t t Regards,
> > -Juanita
) ) ===============WttOiS===============
t t OrgName:
Inc.
GoDaddy.com,
t t OrglD:
GODAD
> > Address:
14455N HaydenRoad
> > Address:
Suite226
> > City:Scottsdale
> > StateProv:
AZ
> > PostalCode:
85260
> > Country:
US
- 64.202.191
> > NetRange:
64.202.160.0
.255
> > CIDR:
64.202.
160.0/1
I
> > NetName:
GO-DADDY-SOFTWARE-INC
> > NetHandle:
NET-64-202-160-0-1
> > Parent:
NET-64-0-0-0-0
> > NetType:
Direct
Allocation
> > NameServer:
CNSl.SECURESERVER.NET
APP129

CONFIDENTIAL

GD-001819

> > NameServer:
CNS2.SECURESERVER.NET
> > NameServer:
CNS3.SECURESERVER.NET
> > Comment:
t t RegDate:
20A2-10-22
t t Updated:
2007-06-14
t t OrgAbuseHandle:
ABUSES1-ARIN
t t OrgAbuseName:
AbuseDepartment
> > OrgAbusePhone: -480-624-2505
+1
t t OrgAbuseEmail:
[e-mail]
> > OrgNOCHandle:
NOC124-ARIN
t t OrgNOCName:
Network
Operations
Center
t t OrgNOCPhone:
[phone]
t t OrgNOCEmail:
[e-mail]
t
t
t
t

t OrgTechHandle:
NOC124-ARIN
OrgTechName:
Network
Operations
Center
"
t OrgTechPhone:
[phone]
t OrgTechEmail:
[e-mail]

\ \ - - --- - -

> > Malaysia
Emergency I E-mail:
Computer
[e-mail]
> > Response
Team
Cyber999
Hotline: [phone]
1
I
(MyCERT)
Fax:[phone]
|
"
t t CyberSecurity
(603)89926969
Malaysia
I Phone:
> > LevelT,
Sapura@Mines
hour:0830-1730
Office
MYT(Mon-Fri)
I
, > 7, JlnTasik,
The Mines
019-266
5850
| 24xTPhone:
> > Resort
City,43300 Kembangan
3801
Seri
SMS:019-281
I
> > Selangor.
MALAYSIA
I URL:http://mycert.org.my/
> > Disclaimer:
> > The information
transmitted electronic
in
mailmessages
sentfrommycert.org.my
> > domain intended forthe person(s) entity(ies)
is
only
or
to
> > whichit is addressed,
represents views/points MyCERT
the
of
and maycontain
> > information
extracted
from various
otherreliable
sources security
on
issues.
t t MyCERT
therefore
doesnot acceptliability any errors, omissions the
for
or
in
> > contents thismessage,
of
whichariseas a result e-mail
of
transmission
and
> > consequences to mis-applying thetechnical
provided.
due
of
solutions/steps
lf
> > you havereceived emailby mistake,
please
this
notifyMyCERT [phone]
at
> > or emailus at [e-mail]

> Malaysia
Emergency I E-mail:
Computer
[e-mail]
> Response
Team
Hotline: [phone]
1
I Cyber999
' (MyCERT)
Fax:[phone]
|
> CyberSecurity
(603)
Malaysia
89926969
I Phone:
APP130

CONFIDENTIAL

GD-001820

> Level Sapura@Mines
7,
hour:0830-1730
MYT(Mon-Fri)
I Office
> 7, JlnTasik,
The Mines
019-266
5850
| 24x7Phone:
> Resort
43300SeriKembanganSMS:019-281
City,
3801
I
> Selangor.
MALAYSIA
I URL.http://mycert.org.my/
> Disclaimer:
> The information
transmitted electronic
in
mailmessages
sentfrom mycert.org.my
> domain intended
person(s) entity(ies)
is
onlyfor the
or
to
> whichit is addressed,
represents views/points MyCERT
the
of
and may contain
> information
extracted
fromvarious
otherreliable
sources security
on
issues.
> MyCERT
therefore
doesnot acceptliability any errors, omissions the
for
or
in
> contents this message,
of
whichariseas a resultof e-mail
transmission
and
> consequences to mis-applying thetechnical
provided.
due
of
solutions/steps
lf
> you havereceived emailby mistake,
[phone]
please
this
notifyMyCERT
at
> or emailus at [e-mail]
------+-Malaysia
Computer
Emergency I E-mail:
[e-mail]
Response
Team
Cyber999
Hotline: 300 88 2ggg
1
I
(MyCERT)
Fax:(603)8e453442
|
CyberSecurity
Malaysia
(603)89926969
I Phone:
Level7, Sapura@Mines
hour:0830-1730
MYT(Mon-Fri)
I Office
7, Jln Tasik,
The Mines
24x7Phone:
019-266
5850
|
Resort
43300SeriKembanganSMS:019-281
City,
3801
I
Selangor.
MALAYSIA
URL:http://mycert.org.my/
I
Disclaimer:
The information
transmitted electronic
in
mailmessages
sentfrommycert.org.my
domainis intended
onlyfor the person(s) entity(ies)
or
to
whichit is addressed,
represents views/points MyCERT
the
of
and may contain
information
extracted
fromvarious
otherreliable
sources security
on
issues.
MyCERT
therefore
doesnot acceptliability any errors, omissions the
for
or
in
contents thismessage,
of
whichariseas a result e-mail
of
transmission
and
consequences to mis-applying the technical
due
provided.
of
solutions/steps
lf
you havereceived emailby mistake,
please
this
notifyMyCERT [phone]
at
or emailus at [e-mail]
.---.BEGIN
PGPSIGNATURE---..
Version:
v2.A.1 (FreeBSD)
GnUPG
1
iEYEARECAAYFAkscYmwAC kQ0BAFclK27XFWwCe OdTvOtE
g
mxzs6LJiPNHNaSYiv
OPs
OxUAn 1TTqvPq 1+DcCergZWRybl
B
BA
=li1l
--...END
PGPSIGNATU
RE---..

APP131

CONFIDENTIAL

GD-001821

APP132

APP133

APP134

APP135

APP136

APP137