NamePros
Welcome, Guest! Ready to make a name for yourself in the domain business? We welcome both the hobbyist and professional domainer to join the discussion as part of the NamePros community.

Click here to create your profile to start earning reputation for posting, and trader ratings for buying & selling in our free e-marketplace. Build your trader rating with each successful sale. Our system has tracked over 100,000 sales and counting!
FAQ & TOS Register Search Today's Posts Mark Forums Read

Go Back   NamePros.com > Business & Community Discussion Forums > Community > Warnings & Alerts
Reload this Page Under Attack!!!!

Warnings & Alerts Report and discuss scams, stolen domains, and bad people or companies to deal with.

Advanced Search
9 members in live chat ~  


Reply
 
LinkBack Thread Tools
Old 08-09-2010, 09:19 AM THREAD STARTER               #1 (permalink)
Senior Member
Join Date: May 2008
Location: In the Van... man..
Posts: 1,092
saucey is a jewel in the roughsaucey is a jewel in the roughsaucey is a jewel in the rough
 



Under Attack!!!!


I have received 20 or 30 of these this morning.. all from a different mail address.. but then it seems that the original sender is the same..

Anybody else getting these?? Thanks.

rn-path: xxxx@YAHOO.COM
From: xxxx@YAHOO.COM
To: XXXXX
Subject: Hosting - Important Updates and Information
Mime-Version: 1.0
Date: Mon, 09 Aug 2010 16:41:47 +0100
Reply-To: xxxx@YAHOO.COM
Content-Type: text/plain
Content-Transfer-Encoding: 8bit

You are welcomed with a command of hackers ZeleniyHach

We hold a huge network of Distributed Denial Of Service Attack, allowing to suspend any web site. We have been watching XXX.COM and were able to find out that you have spent pretty money much for its advancement and we want to to offer you to spend a little more yet. Just as little as 200 bucks as a voluntary donation to our fund will keep your web site away from DDOS attack.
????: NamePros.com http://www.namepros.com/warnings-and-alerts/671293-under-attack.html

200 bucks is not so much also will help you to avoid greater problems in the future.

FOR DULLS..!!! IF YOU DO NOT OFFER TO US 200 bucks WE WILL KILL YOUR WEB SITE!

Unfortunately, we accept only Webmoney Paymer Cheks, so make sure to get your fat asses out and without assistance find out how to transfer money into it. We give you 48 hours. If after 48 hours we will not get 200 dollars, there is one more 0 will be added to 200 bucks, i.e. 2000 bucks and so on until you come to reason.

Stingy pays twice )

When you are ready, just send the check as your response to this message.
In subject matter of the letter specify the domain with greater letters, it is a lot of you We are the one, respect our work.

Respectfully, Top Manager of ZeleniyHach project.
Last edited by saucey; 08-09-2010 at 09:47 AM.
saucey is offline   Reply With Quote
Old 08-09-2010, 09:22 AM   #2 (permalink)
NamePros Member
 
rlopes's Avatar
Join Date: Feb 2010
Posts: 81
rlopes is on a distinguished road
 



Ignore these pricks. Most of them can't perform an effective DDOS.
Anyway, contact your hosting provider and make they aware of the situation.
rlopes is offline   Reply With Quote
Old 08-09-2010, 09:24 AM   #3 (permalink)
NamePros Expert
 
mitch007's Avatar
Join Date: Dec 2008
Location: http://namefrontier.com/
Posts: 8,017
mitch007 Has achieved greatnessmitch007 Has achieved greatnessmitch007 Has achieved greatnessmitch007 Has achieved greatnessmitch007 Has achieved greatnessmitch007 Has achieved greatnessmitch007 Has achieved greatnessmitch007 Has achieved greatnessmitch007 Has achieved greatnessmitch007 Has achieved greatnessmitch007 Has achieved greatness
 



This is an extortion scam of a pretty high order. DO NOT respond to them in any way- no email back, nothing. They have nothing there to hurt you IMO..its all a cyber mafia type extortion trying to get you scared. It's all just an extortion version of a Nigerian scam. DONT FALL FOR IT!!

http://www.419legal.org/blog/2009/04...e-fear-factor/

If you do (or God forbid send them any money) the extortion will never end and your name will get passed around to other scammer extortionists who will see you as "prime sucker meat."

So, ignore it!!!!!!!!!!!!
Last edited by mitch007; 08-09-2010 at 09:42 AM.
mitch007 is offline   Reply With Quote
Old 08-09-2010, 09:42 AM   #4 (permalink)
Domains my Dominion
 
sdsinc's Avatar
Join Date: Aug 2005
Location: Web 1.0
Posts: 9,963
sdsinc Has achieved greatnesssdsinc Has achieved greatnesssdsinc Has achieved greatnesssdsinc Has achieved greatnesssdsinc Has achieved greatnesssdsinc Has achieved greatnesssdsinc Has achieved greatnesssdsinc Has achieved greatnesssdsinc Has achieved greatnesssdsinc Has achieved greatnesssdsinc Has achieved greatness
 


Third World Education Find Marrow Donors! Find Marrow Donors! Find Marrow Donors! Find Marrow Donors! Animal Rescue Animal Cruelty AIDS/HIV Animal Rescue Wildlife Breast Cancer Animal Rescue Wildlife
Report to yahoo, also find out the IP in the mail headers and report to their ISP.
__________________
NameNewsletter.com - free lists of available domain names
ZoneFiles.net (beta) - ccTLD and gTLD droplists
sdsinc is offline   Reply With Quote
Old 08-09-2010, 10:25 AM THREAD STARTER               #5 (permalink)
Senior Member
Join Date: May 2008
Location: In the Van... man..
Posts: 1,092
saucey is a jewel in the roughsaucey is a jewel in the roughsaucey is a jewel in the rough
 



Thanks People. Not sure how to obtain I.P. from headers.

---------- Post added at 10:25 AM ---------- Previous post was at 09:43 AM ----------

Done. Hopefully the emails stop shortly. Thanks again.
saucey is offline   Reply With Quote
Old 08-09-2010, 12:20 PM   #6 (permalink)
New Member
 
sevent's Avatar
Join Date: Mar 2005
Posts: 22
sevent is an unknown quantity at this point
 



Just got flooded with these. They may not be able to DDOS but they are able to put the "Prodigious" in SPAM. :-/

To check for IP make sure you are viewing full headers for the email.
sevent is offline   Reply With Quote
Old 08-09-2010, 03:44 PM   #7 (permalink)
BionicHead.com
 
ecigs.net's Avatar
Join Date: Nov 2006
Location: Rancho Mirage, California
Posts: 1,463
ecigs.net has a reputation beyond reputeecigs.net has a reputation beyond reputeecigs.net has a reputation beyond reputeecigs.net has a reputation beyond reputeecigs.net has a reputation beyond reputeecigs.net has a reputation beyond reputeecigs.net has a reputation beyond reputeecigs.net has a reputation beyond reputeecigs.net has a reputation beyond reputeecigs.net has a reputation beyond reputeecigs.net has a reputation beyond repute
 


Animal Cruelty Child Abuse
I've been getting hundreds (literally) of these today too. Luckily, they don't really know who I am. They are using the default email addresses used by the private whois service. Nevertheless, this is time consuming. I reported them to Yahoo and the Whois service. I wonder if this is going to help at all.
ecigs.net is offline   Reply With Quote
Old 08-09-2010, 04:11 PM   #8 (permalink)
NamePros Member
Join Date: Mar 2007
Posts: 147
hawkv is just really nicehawkv is just really nicehawkv is just really nicehawkv is just really nice
 



These guys are good. I am getting hit too. They are using random IP addresses. It is averaging 4 emails per minute. Don't know how to stop them, other than finding the source, spam blockers don't work because of unique IP addresses !!! Any thoughts ?

Here is a sample of one of the email headers :

Return-path: <anonymous@s374.xrea.com>
Envelope-to: <**** My email ***>>>
Delivery-date: Mon, 09 Aug 2010 16:57:35 -0400
Received: from s374.xrea.com ([125.53.24.142]:58856)
by host.my-host.com with smtp (Exim 4.69)
(envelope-from <anonymous@s374.xrea.com>)
id 1OiZPZ-00036S-6V
for <**** My email ***>>>; Mon, 09 Aug 2010 16:57:34 -0400
Received: (qmail 8817 invoked by uid 1000); 10 Aug 2010 05:54:21 +0900
Date: 10 Aug 2010 05:54:21 +0900
Message-ID: <20100809205421.8816.qmail@s374.xrea.com>
From: anonymous@s374.xrea.com
????: NamePros.com http://www.namepros.com/showthread.php?t=671293
To: <**** My email ***>>>
Subject:
X-Pidtime: 2664 20100810055421
X-Spam-Status: No, score=-0.8
X-Spam-Score: -7
X-Spam-Bar: /
X-Spam-Flag: NO
hawkv is offline   Reply With Quote
Old 08-09-2010, 05:01 PM   #9 (permalink)
BionicHead.com
 
ecigs.net's Avatar
Join Date: Nov 2006
Location: Rancho Mirage, California
Posts: 1,463
ecigs.net has a reputation beyond reputeecigs.net has a reputation beyond reputeecigs.net has a reputation beyond reputeecigs.net has a reputation beyond reputeecigs.net has a reputation beyond reputeecigs.net has a reputation beyond reputeecigs.net has a reputation beyond reputeecigs.net has a reputation beyond reputeecigs.net has a reputation beyond reputeecigs.net has a reputation beyond reputeecigs.net has a reputation beyond repute
 


Animal Cruelty Child Abuse
Are you using privacy protection? If you are, remove it and then add it again (thus generating a new email address). As soon as I did this, the email address that they had for me became invalid and the emails stopped immediately. If you are not using privacy, set up a email filter that blocks a phrase from the subject or body. Blocking this phrase, "huge network of Distributed Denial Of Service Attack," should stop this particular email.
ecigs.net is offline   Reply With Quote
Old 08-10-2010, 12:37 AM   #10 (permalink)
NamePros Regular
 
redrabbit's Avatar
Join Date: Aug 2008
Location: London
Posts: 629
redrabbit is just really niceredrabbit is just really niceredrabbit is just really niceredrabbit is just really nice
 




It really pisses me off when people like this spam. At least, if you are going to spam have the decency to be literate in your email.
__________________
AnswerAssault.com - Ultimate Yahoo Answers Marketing Software - Dominate Yahoo Answers Today!
redrabbit is offline   Reply With Quote
Old 08-10-2010, 10:58 PM   #11 (permalink)
BionicHead.com
 
ecigs.net's Avatar
Join Date: Nov 2006
Location: Rancho Mirage, California
Posts: 1,463
ecigs.net has a reputation beyond reputeecigs.net has a reputation beyond reputeecigs.net has a reputation beyond reputeecigs.net has a reputation beyond reputeecigs.net has a reputation beyond reputeecigs.net has a reputation beyond reputeecigs.net has a reputation beyond reputeecigs.net has a reputation beyond reputeecigs.net has a reputation beyond reputeecigs.net has a reputation beyond reputeecigs.net has a reputation beyond repute
 


Animal Cruelty Child Abuse
That's really funny.
ecigs.net is offline   Reply With Quote
Old 08-11-2010, 11:20 PM   #12 (permalink)
NameDato.com
 
Ergo's Avatar
Join Date: Dec 2006
Location: Jackson's Whole
Posts: 3,311
Ergo has a reputation beyond reputeErgo has a reputation beyond reputeErgo has a reputation beyond reputeErgo has a reputation beyond reputeErgo has a reputation beyond reputeErgo has a reputation beyond reputeErgo has a reputation beyond reputeErgo has a reputation beyond reputeErgo has a reputation beyond reputeErgo has a reputation beyond reputeErgo has a reputation beyond repute
 


Cancer Alzheimer's Cancer AIDS/HIV Cancer Survivorship
I have this problem too. I made a filter in my email client to delete all emails that has no subject.
Ergo is offline   Reply With Quote
Old 08-12-2010, 02:34 AM   #13 (permalink)
Business Member
 
promo's Avatar
Join Date: May 2006
Location: DK
Posts: 1,010
promo has a reputation beyond reputepromo has a reputation beyond reputepromo has a reputation beyond reputepromo has a reputation beyond reputepromo has a reputation beyond reputepromo has a reputation beyond reputepromo has a reputation beyond reputepromo has a reputation beyond reputepromo has a reputation beyond reputepromo has a reputation beyond reputepromo has a reputation beyond repute
 



ecigs.net

Thats a very good temporary solution..
Going to setup a filter for now.. At least my inbox will be cleared then.. Rep added.
promo is offline   Reply With Quote
Old 08-12-2010, 08:13 AM   #14 (permalink)
NamePros Member
 
rlopes's Avatar
Join Date: Feb 2010
Posts: 81
rlopes is on a distinguished road
 



Anybody heard of scam baiting? That'd be fun
rlopes is offline   Reply With Quote
Old 08-12-2010, 12:10 PM   #15 (permalink)
Business Member
 
promo's Avatar
Join Date: May 2006
Location: DK
Posts: 1,010
promo has a reputation beyond reputepromo has a reputation beyond reputepromo has a reputation beyond reputepromo has a reputation beyond reputepromo has a reputation beyond reputepromo has a reputation beyond reputepromo has a reputation beyond reputepromo has a reputation beyond reputepromo has a reputation beyond reputepromo has a reputation beyond reputepromo has a reputation beyond repute
 



Originally Posted by rlopes View Post
Anybody heard of scam baiting? That'd be fun
Except.. These are hackers.. Using hackede Email accounts to send their spam.. You should not let them know that there is an active domainer under your email..
????: NamePros.com http://www.namepros.com/showthread.php?t=671293

In short.. Do not bait them.. Do not taunt them.. Do not contact them at all..
promo is offline   Reply With Quote
Reply


LinkBacks (?)
LinkBack to this Thread: http://www.namepros.com/warnings-and-alerts/671293-under-attack.html
Posted By For Type Date
接到一封自稱是駭客的勒索電郵 - 網域名稱俱樂部 This thread Refback 08-31-2010 05:19 PM
接到一封自稱是駭客的勒索電郵 - 網域名稱俱樂部 This thread Refback 08-10-2010 10:48 AM
接到一封自稱是駭客的勒索電郵 - 網域名稱俱樂部 This thread Refback 08-09-2010 11:46 AM
接到一封自稱是駭客的勒索電郵 - 網域名稱俱樂部 This thread Refback 08-09-2010 10:12 AM
接到一封自稱是駭客的勒索電郵 - 網域名稱俱樂部 This thread Refback 08-09-2010 10:10 AM

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools


 
All times are GMT -7. The time now is 06:56 PM.

Domain name forum recommended by Domaining.com Powered by: vBulletin® Copyright ©2000 - 2012, Jelsoft Enterprises Ltd.
Search Engine Friendly URLs by vBSEO 3.6.0 Ad Management plugin by RedTyger