RE: [registrars] From Treasurer of Registrars Constituency, WARNING, CAUTION, possible phishing.

["Bhavin Turakhia" <bhavin.t@xxxxxxxxxxxxxx>]

hey
 
these may be automated renewal notices from the previous website. i dont
know what could have triggered them now. i will check if thts the case. wats
the progress on the new website? i am kind of out of the loop. should i be
shutting down this website?
 
bhavin


  _____  

From: owner-registrars@xxxxxxxxxxxxxx
[mailto:owner-registrars@xxxxxxxxxxxxxx] On Behalf Of Robert F. Connelly
Sent: Tuesday, January 16, 2007 4:57 PM
To: Registrars Constituency
Subject: [registrars] From Treasurer of Registrars Constituency, WARNING,
CAUTION, possible phishing.
Importance: High


Dear Members:

Several of our members have received the following Email.  The first red
text was highlighted by me to show the obvious misspelling of "following":

Mail Body: Registrar XXXXX has signed up with email id: XXX@xxxxxxx     

Please sign in and click on the folling link
http://www.icannregistrars.org/Default.aspx?tabid=38 for registrar
approval/rejection. 

Regards, 
Site Admin

close quote:

The source of the incoming email was  <admin@xxxxxxxxxxxxxxxxxxx>.  Whoever
wrote it has no official standing with the Registrars Constituency.  Please
be cautious.  Do not attempt to pay any RC fees on this site.  Do not give
any passwords, credit card numbers, etc.  It may well be a phishing
expedition:-(

One registrar *did* attempt to pay through this web site.  He wrote to Jay
and me as follows:



 Regarding a trouble I have in the payment of membership fee, I would
be grateful if you could give me better ways to pay it. I am not sure
to whom I should ask the trouble, I would appreciate your providing
the name, title, or e-mail address I may contact, if you know.

 After I completed online payment by credit card, I received the
'Documents Required' notice which required us to submit fax
authorization by signature because of HIGH RISK classification for our
business credit card. ... 


 I wonder if I can cancel the trackingid and re-register and pay with
another credit card. I found that our name doesn't exist in 'Select
registrar:' list on page for Register at
http://www.icannregistrars.org/Default.aspx?tabid=43
<http://www.icannregistrars.org/Default.aspx?tabid=43&ctl=Register>
&ctl=Register , as
we are in process of registration. 


end quote:

I, too, tried to sign in but could not find Domains Only on the list.  I
checked for other missing registrars, none that I checked were there,
netsol, Godaddy, psi-japan, etc.

The red highlighting, above, is mine. It looks very much as though this
registrar has been exposed to phishing.  

Jay has "scrambled" the DNS for icannregistrars.org so there should be no
more exposure.  If any of you has already put data in the web site, take
protective measures ASAP.

Regards,
Bob Connelly
Treasurer