Spam alert to 3character domain owners

[kwok]

I have received numerous emails from this guy for every single 3character .coms that I own, with the same "template" information. I have received this type of spam before, but not to this extend. Does this guy use some kind of computer program to automatically send out email to 3character domain owners?

Here is one of the emails:
===================================
From: Ajay Chavda [[email protected]]

Hello,

I am interested in purchasing your domain name, xa3.com.I found your contact details from the whois information that you used in order to register the name.

My offer for this domain is $125.00. I am willing to negociate this offer further depending on quality of your name , brandability and other important factors that I might have missed and you bring to my notice.

Please drop in a line so that I know you have received my email.Looking forward to hearing from you.

Thank You,
Ajay
===================================

 

[katherine]

Could you post the full headers of this mail ?

 

[9MM]

It's probably just a person with a lot of time on their hands. Not many people will whois spam for ccc.com's, except premium ones really as the profit margin is small and the only way for a reasonable profit is to pay like $25 for the name but the seller won't sell for that obviously

 

[domain newbie]

why so boring in DNF today ??

 

[9MM]

I don't know, no popcorn action, come hang out with me in chat, I'm bored too

 

[domain newbie]

i'm there~ still boring~ nobody sez anything and no-legal actions, wacup

 

[9MM]

Mmmhmmm, wish the chat was more popular here. I was going to make a thread telling people to come entertain me earlier lol

 

[Theo]

He's probably using DRT.

 

[kwok]

He's probably using DRT.

Don't exactly know what DRT is. Sounds like Greek to me :lol:

sdsinc: I spent (wasted?) some time cleaning up my inbox this morning and deleted this guy's emails, so I don't have the header anymore, but I am sure I will see these emails coming in again soon. I will post in once I receive another one.

 

[9MM]

Don't exactly know what DRT is. Sounds like Greek to me :lol:

sdsinc: I spent (wasted?) some time cleaning up my inbox this morning and deleted this guy's emails, so I don't have the header anymore, but I am sure I will see these emails coming in again soon. I will post in once I receive another one.

Was the subject general like "hello" or did it just have "domain.com" or ...?

 

[GeorgeK]

I received an email from the same person. Here's the redacted full headers:

Delivered-To: (redacted)
Received: by 10.100.6.18 with SMTP id 18cs159269anf;
Fri, 29 Feb 2008 20:14:34 -0800 (PST)
Received: by 10.100.140.10 with SMTP id n10mr21532346and.31.1204344874239;
Fri, 29 Feb 2008 20:14:34 -0800 (PST)
Return-Path: <[email protected]>
Received: from plesk.ev1servers.net ([209.85.28.28])
by mx.google.com with ESMTP id j13si97685rne.17.2008.02.29.20.14.34;
Fri, 29 Feb 2008 20:14:34 -0800 (PST)
Received-SPF: neutral (google.com: 209.85.28.28 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=209.85.28.28;
Authentication-Results: mx.google.com; spf=neutral (google.com: 209.85.28.28 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: (qmail 16834 invoked by uid 48); 29 Feb 2008 22:14:22 -0600
Date: 29 Feb 2008 22:14:22 -0600
Message-ID: <[email protected]>
To: (redacted)
Subject: (redacted).com interest
From: Ajay Chavda <[email protected]>
MIME-Version: 1.0
Content-type: text/html; charset=iso-8859-1

Hello, <br><br>I am interested in purchasing your domain name, (redacted).com.I found your contact details from the whois information that you used in order to register the name.<br><br>My offer for this domain is $125.00. I am willing to negociate this offer further depending on quality of your name , brandability and other important factors that I might have missed and you bring to my notice.<br><br>Please drop in a line so that I know you have received my email.Looking forward to hearing from you.<br><br>Thank You,<br>Ajay

You'll note that 209.85.28.28, which I highlighted above, is where Plesmo.com is hosted, i.e. Luc's system:

http://whois.domaintools.com/209.85.28.28

and possibly on the same server as DomainResearchTool.com:

http://whois.domaintools.com/domainresearchtool.com

(which has an IP address of 209.85.28.108, i.e. very close to 209.85.28.28)

I don't mind DRT itself, but the people who use it to spam should be cut-off somehow.

 

[Devil Dog]

I don't mind DRT itself, but the people who use it to spam should be cut-off somehow.

Luc keeps every email sent via his servers supposedly and limits the amount sent per day from what he's said previously.

Not exactly sure what that amount is though.

 

[Theo]

That reminds me DRT does not work for me now. I try to update to 2.0.5 and on Vista the default installation location is required, resulting in an endless loop. I tried to run as Admin, per Luc's suggestion but it won't make any difference. Luc, if you're reading this I need a workaround, otherwise I feel as if I wasted $129.

Incidentally, I use DRT to research domains and export data, not to mass mail anyone.

 

[BLazeD]

I got this email too

 

[sashas]

Well, at least the guy put a decent first offer :smilewinkgrin:

 

[katherine]

I have received spam from Luc's server too a while back.
Several offers for the same domain name, each time using a different name
I understand the need for discretion but it's ridiculous. At least be consistent and use your real surname.

 

[sashas]

I got one today from someone using the email [email protected]

I think I've seen this email before. Anyone know who this is?

 

[Yofie]

This seems to be "Round 2" of these type of emails. The first one was with an offer of $60 from a different person. Now the $125 offer was done by somebody else, in an effort to be "offering more", but all this does is show the domain owners that the domains Have Value and I'm sure hurt Both at their chances of getting any domains!

IMO, this feature should be REMOVED in DRT, because it's a tool that many will mis-use it.

 

[ARMG]

I too have got several e-mails regarding to ccc.com.

Just ignore him

 

[actnow]

I have received numerous emails from this guy for every single 3character .coms that I own, with the same "template" information.

My spam filter must be working.
I haven't received any of these offers and
I own a few 3 char. domains.

Maybe, DRT's ip is on my blacklist.

I wish the filter would elliminate all of the spam I'm getting from
"Domain Notification: xxxxxx company - This is your Notice of Domain Listing"
"domain listing center".

I got one today from someone using the email [email protected]

I’m getting a couple of these a day.