Tucows don't want suspend phish domain?

Phishing operations, including perpetrators, how to report them and get them shut down.

Tucows don't want suspend phish domain?

Postby efa » Sat Sep 12, 2009 5:37 pm

I had reported a phish domain to the Registrar Tucows, asking for suspension:

Code: Select all
Date: Fri, 11 Sep 2009 13:56:56 +0200
From: <efa>
To: abuse[color=#000000]@[/color]abuse.tucows.com
Subject: Phishing BancaInCasa BCC using domain 'bancaincasa.biz'

Dear TUCOWS,
I have received a phish email, that contain a link to:

http[color=#000000]://[/color]bancaincasa.biz/BancainCasa/htdocs/homemain_ita.html

The link is a fake page of the Italian bank 'BancaInCasa'

The domain is registered uniquely for phishing on:Fri Sep 11 2009
Please suspend immediately the domain 'bancaincasa.biz'
Removal instructions are at this link:
http://www.spamtrackers.eu/wiki/index.php?title=Registrar_Advice

Regards, efa


Tucows do not suspended the domain and answer this:

For the promptest reply, please direct your query
and all future queries to compliance@opensrs.org

Who are opensrs? Why the Registrar directed me to those?
What answer to Tucows?
User avatar
efa
Spammer Exterminator
 
Posts: 1061
Joined: Wed May 02, 2007 8:59 pm

Re: Tucows don't want suspend phish domain?

Postby AlphaCentauri » Sat Sep 12, 2009 9:56 pm

compliance@opensrs.org is a correct address for Tucows. That's where my reports used to go, but now that you mention it, I see that Complainterator only has the tucows address now.

They have other businesses besides domain registration. They are probably best known for their freeware/shareware downloads site, tucows.com. opensrs.com is the domain registration branch of the company.
User avatar
AlphaCentauri
You are kiillllling-a my bizinisss!
 
Posts: 5989
Joined: Thu Mar 01, 2007 3:01 am

Re: Tucows don't want suspend phish domain?

Postby efa » Sun Sep 13, 2009 4:41 am

I understand but from the whois resport on 'bancaincasa.biz' results Tucows as Registrar and no mention of OpenSRS.
We need a unique rule. Tucows seems the only exception in this method?
User avatar
efa
Spammer Exterminator
 
Posts: 1061
Joined: Wed May 02, 2007 8:59 pm

Re: Tucows don't want suspend phish domain?

Postby Forseti » Mon Mar 08, 2010 4:14 pm

OpenSRS is Tucows, or rather, it's their reseller service.

Most large registrars have a type of customer called a reseller: resellers can bundle together limited domain name management services with additional services (hosting etc) that are unique to their business.

For example, Yahoo is a domain name reseller that uses the services of actual registrars (mainly Melbourne IT if my memory serves) for their domain name services, but customers rarely know that - they think that their domain is registered with Yahoo (ie. the registrar).

I don't think that I have read anything about this in this forum, but with regards to resellers, they are responsible to the registrar for the actions of their customers. So, it is never a bad thing to complain to a reseller too!

You can usually see this in a whois listing, with lines such as "registered through" or "registration services provided by" or sometimes by looking at the DNS used and the format of the whois chosen, as there are certain signatures.

I digress... but to answer your question: opensrs is tucows, and it is not necessarily a rare thing to have resellers in the scheme of things.
I'd rather be sailing
User avatar
Forseti
New member
 
Posts: 6
Joined: Mon Jan 19, 2009 5:26 pm


Return to Phishers

Who is online

Users browsing this forum: No registered users and 1 guest

cron