By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here. - Internet Anti-Fraud Center - now open!

 Domain takeover scam?

View next topic
View previous topic
Post new topicReply to topic
Author Message
Not quite a Newb

Joined: 07 Mar 2007
Posts: 48

PostPosted: Tue Nov 11, 2008 11:43 am Reply with quoteBack to top

Some months ago I received an email from a girl asking If she and her friends could have my domain name. They just started a business and discovered that the domain already was taken....buhuu and so on...would I find it in my heart to give it to them....

From time to time people ask to buy my domain, so I just replied that it wasn't for sale and that I'm not going to give it away and wished them good luck with their business. I've had my domain name for ten years now, so I'm not going to part with it.

After a couple of weeks I noticed that my spam box was filling up with delivery failure receipts, and a quick check revealed that my email is now being used as reply to address by a spammer.

Last week a spam email made it all the way to my inbox, and I recognized that the reply to address was from the same girl asking for my domain. I check the originating IP and find that the first IP was from a storm-botnet node in Paris and the second from a IP in Beijing.

Seems like I'm being targeted by a spammer? What I find interesting is that I now have an email address that this spammer probably reads. This means that I can actually try to bait a spammer, but will it be wrong?

The spammer tried to scam me into giving away my domain, but is that enough? Last and not least....what kind of baiting??? The usual 419-baiting scripts probably wont work.

View user's profileSend private message
419Eater is my life

Joined: 22 Oct 2008
Posts: 415
Location: Thank you.....Thank you very much

PostPosted: Tue Nov 11, 2008 1:46 pm Reply with quoteBack to top

Because of my RL business, some scammers have also been using my email address to send out letters. I get on average 50 a day that are directed into my deleted folder. It's been going on for a couple of years now. I guess it looks more credible for their victims.

I have also be targeted by specific 419 scammers trying animal scripts they have or they want. Recently those have dwindled out as most organizations are on to them.

I was told there was nothing I could do about it. I don't know if your situation is any different.

Can you get a copy of the scam letter they are sending out?

The other thing you can do is send out a generic. "Can you please tell me more, it sounds interesting"

To get a response. Once you get the response then you have them.

Closed lad accountsClosed lad accounts Mortar x4
"To be frank you make me sick, but since you want the account number, here is the account number you need"
"I got your email and you made me laugh, I guess you have slapped a lawyer before, if you slap me, I will jail you, WELL JUST JOKING, I guess I triggered your anger, by my ealier speech, I AM VERY SORRY, I was so stressed up in the court today"

"these documents are personal as they are alot of scams around and need certain of these informationd for their personal use."
View user's profileSend private message
Baiting Guru

Joined: 13 Feb 2007
Posts: 14310
Location: Foraging for Nuts.

PostPosted: Tue Nov 11, 2008 1:50 pm Reply with quoteBack to top

Sounds like they're trying to get your domain registered as a spammer in the hope that you'll abandon it.

Not a lot you can do really, apart from wait for it to die down.

Star pony pony pony Nurse Nastys Audi TT Purple Flower Whip
Safari Jolly Roger Mortar Closed lad accounts Cellphone United Kingdom

God will see you true for all this you have done to me you bastard. - Collins Kalu
oh what a mess its time cabbage punks like u will be expose for trully what they are. - David Cole
View user's profileSend private messageYahoo MessengerSkype Name
Not quite a Newb

Joined: 07 Mar 2007
Posts: 48

PostPosted: Tue Nov 11, 2008 9:00 pm Reply with quoteBack to top

I guess the spammers motive for using my email as reply to is to increase the amount of spam I get in hope of me abandoning the domain. However I've use the same email addy for ten years, so I have solved the spam problems. Interestingly the volume has droppet from 200-300 hundred a day to about 50 the last year. Some major botnets has been more or less shut down, so I think that's the reason. Now I have seen an increase to about a 100 a day again.

If I'm going to bait this one I'm obviously not going to do it from my real account. My domain is registered to my home address and phone number.

I've googled phrases from the email where the spammer asks me if I can give away my domain, and it doesn't give any hits. The other email is a generic one for The same spam also circulates for which is an identical page. I would recommend to not shop from any of the two, as I suspect probably no merchandise will ever be sent.

Also on my website there have been in average 200 spam comments a day for a while, starting the day after I got the initial email. None of the 6000 comments a month has made it through my spam filtering, and it seems like they've given up.

But which angle do I take to bait a spammer? Is it even possible? Has it been done? Should it be done?
View user's profileSend private message
from the Hollow
Wannabe Baiter

Joined: 24 Oct 2008
Posts: 80

PostPosted: Tue Nov 11, 2008 10:11 pm Reply with quoteBack to top

I just ask them for a job. Lets see if I hear back from them.

Just got this back.

to me

show details 5:24 PM (49 minutes ago)


--- 08年11月12日,周三, E----y <[email protected]> 写道:

发件人: E-----y <[email protected]>
主题: Job
收件人: [email protected]
日期: 2008,1112,周三,6:11上午

I guess I did not get the job.

Crying or Very sad
View user's profileSend private message
Not quite a Newb

Joined: 07 Mar 2007
Posts: 48

PostPosted: Wed Nov 12, 2008 10:23 am Reply with quoteBack to top

The actual websites are not the target here. Even though I suspect them to be shady they might be run by a third party. It's the spammer that has shown interest for my domain that I'm after. Not the sites and services the spammer is promoting.
View user's profileSend private message
Display posts from previous:      
Post new topicReply to topic

 Jump to:   

View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

** Find out information about your IP address **

All Content © 2003 -
Powered by phpBB © 2001, 2002 phpBB Group :S5: FI Theme :: All times are GMT