Email Transfer Scam

[Grrilla]

I don't know how common this might be but since it is a new one on me I thought it best to pass along.

I received a transfer request via email that is legitimate on the surface- the problem is I have no intentions of tranferring the name nor have I had any previous dealings with the individual making the request. Here's the email:

Attention: [email protected]

Re: Transfer of eyeprinter.com

The current registrar of record for this domain name is ENOM, INC..

Tucows has received a request from Faisal Iqbal

on Thu Jul 12 19:24:05 2007 for us to become the new registrar of record.

You have received this message because you are listed as the Registered Name Holder
or Administrative contact for this domain name in the WHOIS database.
Please read the following important information about transferring your domain name:

* You must agree to enter into a new Registration Agreement with us. You can
review the full terms and conditions of the Agreement at
https://rr-n1-tor.opensrs.net/transfers/index.cgi?rid=29736&tld=.com&action=contract

* Once you have entered into the Agreement, the transfer will take place within
five (5) calendar days unless the current registrar of record denies the request.

* Once a transfer takes place, you will not be able to transfer to another registrar
for 60 days.
If you WISH TO PROCEED with the transfer, you must respond to this message as outlined below (note: if you do not respond by Tue Jul 17 19:24:05 2007,
eyeprinter.com will not be transferred to us.).

Please go to our website, https://rr-n1-tor.opensrs.net/transfers/index.cgi?rid=29736 to confirm.

You will need to enter the following information to log in and accept or decline the transfer:

Domain Name : eyeprinter.com
Transfer Key: [number]
If you DO NOT WANT the transfer to proceed, then don't respond to this message.

If you have any questions about this process,
please contact [email protected]

Of course there are safeguards in place- it would be necessary for me to enter the code at the link for the transfer to take place and a registrar lock will keep the name from going away irregardless

All that I can figure is that whoever is behind this must be trying to hit the less savvy domain owner- certainly not an active domainer. The link appears to be legit so it would follow that the account and account owner are for real so my best guess is that Mr Iqbal (if that is his real name) is trolling for registrants who are asleep at the wheel.

I've informed enom and Tucows of the matter and hope to find out what they make of it. I'm assuming it's a scam but maybe there's another explanation.

 

[Dave_Z]

It's also possible it's an honest mistake. But...no one will really know without
further checking, which might or might not be worthwhile as long as there are
safeguards in place.

Me, I wouldn't fret about it as long as I keep my domain and email secure. But
then, it's with Moniker. :D

 

[Kenny]

MIKE!!!!!!!! :tu: Howzit bro?

Oh, and thanks for the heads up!

kp