RE: [SAtalk] Domain Registry Of Canada scammers = spam? or con?

2004-01-12 Thread Mitch \(WebCob\)
Apparently DROA (domain registry of america) is also being sued by a variety
of people... Enom Inc is the parent I think.

I'm not a rule writer expert, but I figure to be of real use, such a thing
should be included in the default set with a reasonable score - looking at
setting a precedent of sorts if it isn't already existing...

m/

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of
Damian Gerow
Sent: Monday, January 12, 2004 1:43 PM
To: Mitch (WebCob)
Cc: [EMAIL PROTECTED]
Subject: Re: [SAtalk] Domain Registry Of Canada scammers = spam? or con?


Thus spake Mitch (WebCob) ([EMAIL PROTECTED]) [12/01/04 16:39]:
> 'Cause they are scammers... they are being actively sued by a variety of
> people...
>
> There are a variety of these buggers, many have bad reps with various
> business bureaus, etc.
>
> From my viewpoint, a con artist with a % of legitimate business, is still
a
> con artist.
>
> Just as a legitimate bulk mailer who spams (and gets in an RBL and is
> rejected for being a spammer), so should a scam/spammer who MIGHT have
some
> legitimate business...
>
> IMHO anyways ;-)

Well, given the few responses, and some discussion with a co-worker, I
retract my statement about blacklisting them being a bad thing.  If they
/are/ being sued, if they /do/ have a bad reputation, then by all means,
give them a score.  We had not yet tracked down the reason for the bad
transfer requests, and I was under the impression that the rate was much
lower than it was.


---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
___
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk



---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
___
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk


Re: [SAtalk] Domain Registry Of Canada scammers = spam? or con?

2004-01-12 Thread Damian Gerow
Thus spake Mitch (WebCob) ([EMAIL PROTECTED]) [12/01/04 16:39]:
> 'Cause they are scammers... they are being actively sued by a variety of
> people...
> 
> There are a variety of these buggers, many have bad reps with various
> business bureaus, etc.
> 
> From my viewpoint, a con artist with a % of legitimate business, is still a
> con artist.
> 
> Just as a legitimate bulk mailer who spams (and gets in an RBL and is
> rejected for being a spammer), so should a scam/spammer who MIGHT have some
> legitimate business...
> 
> IMHO anyways ;-)

Well, given the few responses, and some discussion with a co-worker, I
retract my statement about blacklisting them being a bad thing.  If they
/are/ being sued, if they /do/ have a bad reputation, then by all means,
give them a score.  We had not yet tracked down the reason for the bad
transfer requests, and I was under the impression that the rate was much
lower than it was.


---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
___
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk


RE: [SAtalk] Domain Registry Of Canada scammers = spam? or con?

2004-01-12 Thread Mitch \(WebCob\)
'Cause they are scammers... they are being actively sued by a variety of
people...

There are a variety of these buggers, many have bad reps with various
business bureaus, etc.

>From my viewpoint, a con artist with a % of legitimate business, is still a
con artist.

Just as a legitimate bulk mailer who spams (and gets in an RBL and is
rejected for being a spammer), so should a scam/spammer who MIGHT have some
legitimate business...

IMHO anyways ;-)

m/

-Original Message-
From: Damian Gerow [mailto:[EMAIL PROTECTED]
Sent: Monday, January 12, 2004 12:57 PM
To: Mitch (WebCob)
Cc: [EMAIL PROTECTED]
Subject: Re: [SAtalk] Domain Registry Of Canada scammers = spam? or con?


Thus spake Mitch (WebCob) ([EMAIL PROTECTED]) [12/01/04 15:47]:
> These guys have quite a reputation for a common con - I ask this question
to
> provoke discussion and hopefully decision on SA policy on a method of
> dealing with these kind and their ilk.
>
> They send a message (spam?) to the domain owner, requesting that he
confirm
> a request to transfer his domain by clicking a link... or replying to the
> message, then they initiate the process.

We get a number of these per week ('we' being an ISP).  The number of false
transfer requests is pretty high -- there's a pretty small number of
requests that we get that are actually valid.

Blocking these, IMHO, would be a Bad Thing.  We're still trying to track
down why incorrect domain transfer requests come through.

(Side note: we have gotten one that was a result of a request by a customer
made a year previous...)



---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
___
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk


Re: [SAtalk] Domain Registry Of Canada scammers = spam? or con?

2004-01-12 Thread Jay Swackhamer
On Monday, January 12, 2004 3:47 PM, Mitch (WebCob) wrote:
> Here is one such message. The client assures me they did not at any
> time contact these guys... which is of course the con - convince the
> client you are doing what they asked you to and then do it when they
> blindly confirm...

I've never seen them send e-mail asking to renew -- it's *always* sent
by postal mail first, then they send a confirmation by e-mail, like the
one you posted, only *after* the domain owner sends in a payment. I've
had customers say they didn't do that, but after some probing they admit
they thought it was *our* invoice.

> There is a summary with info on a variety of lawsuits of this practice
> ("domain slamming") here http://www.domainhandbook.com/legal.html

They also got barred by the FTC a few weeks ago for misleading
consumers. So far, they (DROC/DROA) haven't complied with the court
orders.   

> Personally I vote for scorring these buggers +100 and any more like
> them - but I think a class or common format of rule is required if
> not already existant - I imagine there are a bunch of these happening.

I blacklist their mail-from address ([EMAIL PROTECTED]/droc.com) and
review them manually, then warn the customer who these guys are, and
advise them to do a charge-back.

--
Jay Swackhamer <[EMAIL PROTECTED]>
MailPolice Spam&Virus Elimination 
Tel: 1-613-843-9358  Fax: 1-613-825-5960



---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
___
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk


Re: [SAtalk] Domain Registry Of Canada scammers = spam? or con?

2004-01-12 Thread Damian Gerow
Thus spake Mitch (WebCob) ([EMAIL PROTECTED]) [12/01/04 15:47]:
> These guys have quite a reputation for a common con - I ask this question to
> provoke discussion and hopefully decision on SA policy on a method of
> dealing with these kind and their ilk.
> 
> They send a message (spam?) to the domain owner, requesting that he confirm
> a request to transfer his domain by clicking a link... or replying to the
> message, then they initiate the process.

We get a number of these per week ('we' being an ISP).  The number of false
transfer requests is pretty high -- there's a pretty small number of
requests that we get that are actually valid.

Blocking these, IMHO, would be a Bad Thing.  We're still trying to track
down why incorrect domain transfer requests come through.

(Side note: we have gotten one that was a result of a request by a customer
made a year previous...)


---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
___
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk


[SAtalk] Domain Registry Of Canada scammers = spam? or con?

2004-01-12 Thread Mitch \(WebCob\)
These guys have quite a reputation for a common con - I ask this question to
provoke discussion and hopefully decision on SA policy on a method of
dealing with these kind and their ilk.

They send a message (spam?) to the domain owner, requesting that he confirm
a request to transfer his domain by clicking a link... or replying to the
message, then they initiate the process.

Here is one such message. The client assures me they did not at any time
contact these guys... which is of course the con - convince the client you
are doing what they asked you to and then do it when they blindly confirm...

I'm thinking there is a special place in hell for companies like this - the
question is, should SA have a mechism and a particularly punitive score for
this sort of practice?

There is a summary with info on a variety of lawsuits of this practice
("domain slamming") here http://www.domainhandbook.com/legal.html

Here is the original message (note I replaced their order ID with 123456 and
a couple other personal bits with CAPS:

Personally I vote for scorring these buggers +100 and any more like them -
but I think a class or common format of rule is required if not already
existant - I imagine there are a bunch of these happening.

Thoughts?

Thanks!

m/
-Original Message-
From: Transfer and Renewal Support [mailto:[EMAIL PROTECTED]
Sent: Monday, January 12, 2004 3:57 AM
To: CLIENT ADDRESS
Subject: [DOMAIN Order #123456] Transfer and Renewal Process


To DOMAIN / CONTACT NAME,

Thank you for choosing to transfer and renew capstonegold.com with the
Domain Registry of Canada.

Your transfer and renewal of capstonegold.com is not yet complete.

This email is being sent to verify your email address is still active.

We require that you click on the link below to confirm your email
address is active.

http://confirm.droc.ca/agree.asp?o=123456&p=gkre

You must click on the link above in order to continue the transfer and
renewal process.

Yours truly
Domain Registry of Canada
Toll free 1-866-434-0212 or for International Callers, dial
+1(905)479-2533

1/12/2004 6:57:03 AM



---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
___
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk