Since that time, anytime we've seen a natural disaster, we've been on the lookup for domains which might be abused for fraud. It was only natural then that I retuned my settings at DomainTools yesterday to alert on Gustav domains.
Here's what we've seen so far about new domains, registered with the word "Gustav" in them:
- parked at GoDaddy
Parked at IPTV Domains:
Parked at Mad Dog Domains & Cattle Company:
Parked at Network Solutions:
Parked on a Sedo search click ads site:
Parked at Sedoparking.com:
Points to a Sedo IP, but no content there:
Parked at WebSites2You:
For sale by auction on ebay and sedo by "harfordadvantage.com":
There are several newly registered Gustav domains that actually contain real content!
gustavneworleans.com <== SHOCK! A real page of Gustav Information! (registered by Lawrence Muller of Virtual Corp in New York, who owns more than 400 other domains)
gustavpictures.com <== SHOCK! A real page of Gustav-related photos! (registered via Domains By Proxy by someone who seems to be "on the ground" watching the National Guard come into town)
hurricanegustavphotos.com <== SHOCK! A real page for Gustav-related photos! (registered by Cyril Payne of Theodore, Alabama. A nice frame, but no pictures yet.)
hurricanegustave.info <== SHOCK! Real information about the storm! (registered by Mark Cummings of Madisonville, Louisiana. Useful and current storm data, with Weather Channel graphics.)
Two Offering Good Deeds
Two other domains seem to be owned by Good Citizen who have reserved the domains and will give them for free to a worthy charity who would like to have the domain:
gustavrelief.info <== SHOCK! A good deed doer has reserved this domain, which he will give for free to a real charity . . .
gustavrelieffund.org <== See image
So far no signs of fraud, only Domain Speculation, but as always, we'll be keeping an eye on the situation as we move forward.
Director of Research
UAB Computer Forensics