Hi, It looks like our innovative friends at BuyDomains.com area also spammers. One of my customers received this spam e-mail, which seems try to give the impression that it's a legitimate renewal notice. It's interesting that this domain expires in about 9 weeks. Perhaps they're timing there spam to arrive before the real 60 renewal notices. <spam> From: Expiration Notice [mailto:[EMAIL PROTECTED]] Sent: Thursday, June 28, 2001 8:50 AM To: [removed] Subject: Domain Expiration Notice Dear [removed], Our research indicates that your domain [removed].com will expire on 2001-09-04. We are sending this email as a friendly reminder that it's time to renew your domain registration. While some sources charge $35 or more per year to renew domains, you can transfer and renew your registration through BuyDomains.com for LESS THAN HALF (ONLY $16). And, just for registering with BuyDomains.com, your services will be substantially upgraded at no additional charge. This will include: - Free unlimited email address forwarding at your domain - Free URL and frame forwarding - Prompt toll free technical and administrative support - Simple online control panel to manage all domain features and whois data - Free domain parking and DNS - Free "Under construction" or "Domain for sale" page Some registrars will try to illegitimately prevent you from transferring your domain for 30 days or more before expiration. To transfer and automatically renew your registration for a year past your current expiration date for only $16 (and receive the above FREE services), simply click http://transfer.buydomains.com/cgi-bin/transfer.cgi?id=775527&email=[rem oved] It's fast and easy and will not result in any downtime. Whether through BuyDomains.com or another registrar, renew your domain(s) right away to avoid possibly losing them forever. Customer Comments: http://transfer.buydomains.com/BD/comments.html --------------------- This message is brought to you as a friendly reminder from BuyDomains.com. Should you wish to exclude yourself from this and any further mailings, please reply to this message with the word "remove" in the subject line. If you would rather confirm your removal via the web, enter your e-mail address at: http://transfer.buydomains.com/cgi-bin/unsubscribe.cgi?email=[removed] Thank you. </spam> -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Paul Chvostek Sent: Wednesday, June 27, 2001 11:42 PM To: Len Thomson Cc: [EMAIL PROTECTED] Subject: Re: unbelieveable squatter tricks I just added a filter to our web-based WHOIS. It's just a simple sed command, 's/<[^>@]*>//g' Stripts out anything between pointy brackets, skipping occurrances that look like email addresses. Good enough for now. On Thu, Jun 28, 2001 at 03:25:43PM +1200, Len Thomson wrote: > > I'm definitely stopping using a Web based WHOIS..... Back to my favorite > Character based tool - and I have some changes to make to my whois parsing > script as well..... > > Len Thomson > L.A. Consulting Ltd > Auckland > New Zealand > > ----- Original Message ----- > From: "Eric Paynter" <[EMAIL PROTECTED]> > To: "William X. Walsh" <[EMAIL PROTECTED]>; "cpaul" > <[EMAIL PROTECTED]> > Cc: <[EMAIL PROTECTED]> > Sent: Thursday, June 28, 2001 2:48 PM > Subject: Re: unbelieveable squatter tricks > > > Get ready... now that somebody's done it, it's going to start appearing > everywhere. > > On June 27, 2001 06:39 pm, William X. Walsh wrote: > > Hello cpaul, > > > > Wednesday, June 27, 2001, 5:39:42 PM, cpaul wrote: > > > i was attempting to pick up this expired domain; i missed it. > > > > > > but what the registrant has done to the netsol whois is incredible: > > > > > > > http://www.networksolutions.com/cgi-bin/whois/whois?STRING=artsdirectory . > > >com > > > > > > they've managed to inject iframes, adverts, links, into the whois data. > > > > That's rich :) > > > > That has to be the most creative one I've seen yet. > > -- > arctic bears - the internet - your way. > email hosting from US$8/month, domains from US$19/year. > http://www.arcticbears.com > > -- Paul Chvostek <[EMAIL PROTECTED]> Operations / Development / Abuse / Whatever vox: +1 416 598-0000 IT Canada http://www.it.ca/