spam now coming from Boro works Inc.

[Adam DickerAdam Dicker is verified member.]

Example below.... I got 3 so it's definite spam.
---------------------------------------------------

Hello,

I am inquiring to see if you would like to sell your xxxxxxxxxxx.com domain name.
I'm seriously interested in buying xxxxxxxxxxxx.com If so, kindly respond with your asking price for the name.
Thanks for your time.

Best regards,

Boro works Inc.

 

[Jack Gordon]

yeah, I'm getting this one too. Looks like the 'phishing for expired admin domains' scam.

 

[Mr Webname]

Here too.

 

[domaintalk]

Same here.
I found a bit information about Boro Works that they are an well reputated company.
But scams , just SAD!

 

[diverge]

yeah, I'm getting this one too. Looks like the 'phishing for expired admin domains' scam.

Can you kindly elaborate on this scam (or give me a link to a thread, if available), please? Does it entail the intention to hijack the domain?

 

[GeorgeKGeorgeK is verified member.]

The headers of the emails I received indicated an origin in Turkey, if I recall correctly.

 

[Jack Gordon]

Can you kindly elaborate on this scam (or give me a link to a thread, if available), please? Does it entail the intention to hijack the domain?

yeah, that's about it.

1) identify a list of desirable domains
2) email the admin contacts a bogus offer request
3) monitor the bouncebacks, and register any available admin address domains
4) initiate transfer of desired domain

The one part that doesn't make too much sense is why bother with a legit-looking email in the first place? I guess if the scammer does happen to get a reply with a low price, that is a plan B.

 

[Zoobar]

Received 2 last night. Bogus.

 

[Deleted member 2020]

I got it for the same domain name that I have received various other scam e-mails for, so maybe they are from the same person only change of name/company name?

 

[keyser]

2 received here

 

[Salient]

Here is the answer I was looking for, I replied to this email a couple days and got no response. I still dont understand how they would be able to register a name based upon a bounceback, please explain...

" 3) monitor the bouncebacks, and register any available admin address domains" - MovieDomains

Cheers,
Stuart.

 

[Jack Gordon]

Here is the answer I was looking for, I replied to this email a couple days and got no response. I still dont understand how they would be able to register a name based upon a bounceback, please explain...

" 3) monitor the bouncebacks, and register any available admin address domains" - MovieDomains

Cheers,
Stuart.

It's a clever hijacking scheme. What do you need in order to approve a domain transfer? You need a willing admin contact. So if the domain used in the admin contact's email address is invalid, anybody could register it and set up the address that the old admin used. Once that is in place, you initiate the transfer, and when you get the request to approve the transfer, you approve it.

 

[Salient]

Gotch-ya.

Thank you for clarifying, for the "newer" folk.

 

[seeker]

MD, you are teaching everyone the secret methods!

 

[Steen]

The headers of the emails I received indicated an origin in Turkey, if I recall correctly.

Easily forged.