I got my first fraudulent transfer request yesterday, for hostingtalk.com (the name was locked, but they tried anyway....). I wrote to names4ever.com/aplus.net to learn the identity of the fraudster, but they've not replied to my request. The transfer email that Names4ever sent didn't seem to conform to the "standardized" form that ICANN requires, either --- although, I didn't click the "Click this link to confirm the transfer", to see if their website had the proper wording.
Here's what they sent:
------ transfer request ---------------
X-Apparently-To:
[email protected] via 68.142.225.176; Tue, 23 Nov 2004 20:35:14 -0800
X-Originating-IP: [216.55.191.3]
Return-Path: <
[email protected]>
Received: from 216.55.191.3 (EHLO relay.aplus.net) (216.55.191.3) by mta344.mail.scd.yahoo.com with SMTP; Tue, 23 Nov 2004 20:35:13 -0800
Received: from rodopi.names4ever.com ([216.55.150.20]) by relay.aplus.net (8.13.1/8.13.1) with ESMTP id iAO4ZC99065356 for <
[email protected]>; Tue, 23 Nov 2004 20:35:12 -0800 (PST) (envelope-from
[email protected])
Date: Tue, 23 Nov 2004 20:35:12 -0800 (PST)
From:
[email protected] Add to Address BookAdd to Address Book
Message-Id: <
[email protected]>
To:
[email protected]
Subject: hostingtalk.com - Domain Transfer Request
Importance: High
Content-Length: 810
Hello,
A transfer has been requested for your domain name hostingtalk.com.
To confirm this transfer request, simply click on the link below
or cut and paste the text into your browser:
https://www.names4ever.com/public/D...e=hostingtalk.com&ApprovalCode=***redacted***
If you use your browser, you will need the following information
to complete your transfer:
Your Domain Name: hostingtalk.com
Your Transfer Approval Code: ***redacted***
If you experience any problems during this process,
please contact our domain transfer experts at (888)301-2516
or email us at
[email protected]
If you did not request a transfer, please ignore this message.
We will not transfer your domain without confirmation.
Aplus.Net
Tech Support Team
--------- transfer request ends ---------------
That doesn't seem to match the REQUIRED wording of:
http://www.icann.org/transfers/foa-auth-12jul04.htm