This stuff really gets my goat! We have all these people screaming challenge response this and that. Why the hell not have a challenge response to domain reg? Any yahoo with a credit card can get a domain. There should be human interaction required to register a domain. And the register would have to call the person back.
It would slow up registration...which is a good thing. Data would have to be good. But no, lets do challenge response after the horse has left the barn! They could deny domains like lksjflj49sjf.biz Spam should be stopped further up stream. The solutions are there, but the $$$$ stops them from being implemented. --Chris (Ranting...and using far to many animal quotes) >-----Original Message----- >From: David J. Duffner - NWCWEB.com [mailto:[EMAIL PROTECTED] >Sent: Sunday, August 08, 2004 8:32 PM >To: 'Loren Wilton'; 'SpamAssassin Mailing List' >Subject: RE: Is this a sign of a spammer registrar? > > > Not necessarily a spammer Registrar, but certainly >one that shouldn't be allowed to register and maintain >domains! Looks more like their systems allow someone >to punch in anything that looks remotely close to a >valid answer and then that gets propagated into the >networks. > > In this case the domain, which may be at an HSP >or at least has it's own DNS on that server, is at a >host who certainly allows spammy stuff to fly. > > Best course of action is to do a traceroute >on the IP you ended up with and see if it leads you to >any clues on who this domain is registered to. Also >snap a nice nastygram to 'Directi', though that'll go >unanswered or have a reply like 'not our problem, >have a nice day'. You can file a complaint with ICANN >on it, wouldn't hurt, but again it takes a large stream >of complaints to them about a Registrar to get any >movement. > > Any the whole thing coud be a smokescreen for a >forged IP anyways, which makes all the work pointless. > > Sorry there isn't a better answer, we've been >fighting them off like mad lately too! Starting to see >a rash of completely blank and half-filled header e-mails >with no easy tracebacks and no way to block them out. > > David J. Duffner > VP Operations > NWC Corporation > NWCWEB.com > >============================================ >NWCWEB.com - Your Design & Hosting Solution! >Featuring Ensim Pro/Linux Servers, Hosted >Accounts, Web Design and e-Commerce services >NWC Corporation - Global e-Pay Solutions >============================================ > > > > >>-----Original Message----- >>From: Loren Wilton [mailto:[EMAIL PROTECTED] >>Sent: Sunday, August 08, 2004 7:49 PM >>To: SpamAssassin Mailing List >>Subject: Is this a sign of a spammer registrar? >> >> >>[Querying whois.internic.net] >>[Redirected to whois.directi.com] >>[Querying whois.directi.com] >>[whois.directi.com] >>Domain Name: CPACCESS1.COM >> >>----------------------------------- >>Domain Expiration Date: 07-Jan-2005 >>Domain Creation Date: 07-Jan-2004 >>Domain Status: ACTIVE >> >>----------------------------------- >>Domain servers in listed order: >> ns1.cpaccess1.com >> ns2.cpaccess1.com >> >>Registrant: >> Undisclosed >> Undisclosed ([EMAIL PROTECTED]) >> Undisclosed >> Undisclosed >> null,123456 >> IN >> Tel. +91.1111111 >> >>Administrative Contact: >> Undisclosed >> Undisclosed ([EMAIL PROTECTED]) >> Undisclosed >> Undisclosed >> null,123456 >> IN >> Tel. +91.1111111 >> >>Technical Contact: >> Undisclosed >> Undisclosed ([EMAIL PROTECTED]) >> Undisclosed >> Undisclosed >> null,123456 >> IN >> Tel. +91.1111111 >> >>Billing Contact: >> Undisclosed >> Undisclosed ([EMAIL PROTECTED]) >> Undisclosed >> Undisclosed >> null,123456 >> IN >> Tel. +91.1111111 >> >> >> >>-- >>Message scanned by MailScanner, and is believed to be clean. >>CONFIDENTIALITY NOTICE: This transmission intended for the >>specified destination and person. If this is not you, this >>e-mail must be deleted immediately. www.nwcweb.com >> > > >-- >Message scanned by MailScanner, and is believed to be clean. >CONFIDENTIALITY NOTICE: This transmission intended for the >specified destination and person. If this is not you, this >e-mail must be deleted immediately. www.nwcweb.com >
