spam now coming from Boro works Inc.

A D · Mar 28, 2005

Example below.... I got 3 so it's definite spam.
---------------------------------------------------

Hello,

I am inquiring to see if you would like to sell your xxxxxxxxxxx.com domain name.
I'm seriously interested in buying xxxxxxxxxxxx.com If so, kindly respond with your asking price for the name.
Thanks for your time.

Best regards,

Boro works Inc.

Jack Gordon · Mar 28, 2005

yeah, I'm getting this one too. Looks like the 'phishing for expired admin domains' scam.

Mr Webname · Mar 28, 2005

Here too.

domaintalk · Mar 28, 2005

Same here.
I found a bit information about Boro Works that they are an well reputated company.
But scams , just SAD!

diverge · Mar 28, 2005

MovieDomains said:
yeah, I'm getting this one too. Looks like the 'phishing for expired admin domains' scam.

Can you kindly elaborate on this scam (or give me a link to a thread, if available), please? Does it entail the intention to hijack the domain?

GeorgeK · Mar 28, 2005

The headers of the emails I received indicated an origin in Turkey, if I recall correctly.

Jack Gordon · Mar 28, 2005

FLe8 said:
Can you kindly elaborate on this scam (or give me a link to a thread, if available), please? Does it entail the intention to hijack the domain?

yeah, that's about it.

1) identify a list of desirable domains
2) email the admin contacts a bogus offer request
3) monitor the bouncebacks, and register any available admin address domains
4) initiate transfer of desired domain

The one part that doesn't make too much sense is why bother with a legit-looking email in the first place? I guess if the scammer does happen to get a reply with a low price, that is a plan B.

Zoobar · Mar 28, 2005

Received 2 last night. Bogus.

dotNetKing · Mar 28, 2005

I got it for the same domain name that I have received various other scam e-mails for, so maybe they are from the same person only change of name/company name?

keyser · Mar 29, 2005

2 received here

Salient · Mar 29, 2005

Here is the answer I was looking for, I replied to this email a couple days and got no response. I still dont understand how they would be able to register a name based upon a bounceback, please explain...

" 3) monitor the bouncebacks, and register any available admin address domains" - MovieDomains

Cheers,
Stuart.

Jack Gordon · Mar 29, 2005

Salient said:
Here is the answer I was looking for, I replied to this email a couple days and got no response. I still dont understand how they would be able to register a name based upon a bounceback, please explain...

" 3) monitor the bouncebacks, and register any available admin address domains" - MovieDomains

Cheers,
Stuart.

It's a clever hijacking scheme. What do you need in order to approve a domain transfer? You need a willing admin contact. So if the domain used in the admin contact's email address is invalid, anybody could register it and set up the address that the old admin used. Once that is in place, you initiate the transfer, and when you get the request to approve the transfer, you approve it.