[registrars] ANOTHER .BIZ RENEWAL SCAM

[Paul Westley <paul@internetters.co.uk>]

Hi guys,

We are receiving reports of another attempt to scam .biz registrants for 
renewals. This time the domain name used for their website and email is 
domain-renewal.biz (only registered on 24th April). The previous domain 
name used before it was closed down was domainrenewals.biz. The website is 
identical and although there is some rudimentary verification within the 
form this time, you can enter anything you like - including domain name, as 
long as 16 numbers go in the card number field and 3 numbers in the CCV2 
field - almost certainly only a ruse to obtain credit card details.

Interestingly the source of the emails is the same - 
pc2-papw2-4-cust53.cmbg.cable.ntl.com - IP address is 81.104.220.53

We have reported it to NTL, but they may take some time before they take 
any action as it is a holiday weekend in the UK.

Copy of email received copied below. Of course, the domain is not due for 
renewal until November.

>From: ".BIZ RENEWALS" <renewal-help@domain-renewal.biz>
>To: <***>
>Sent: Saturday, May 03, 2003 7:19 PM
>Subject: Expiry Notice (***.BIZ)
>
>
> > Dear Registrant,
> >
> > Your domain ***.BIZ is due for renewal shortly. Please
> > see our web site to renew your domain name:
> >
> > http://www.domain-renewal.biz
> >
> > IMPORTANT: FAILURE TO RENEW YOUR DOMAIN BEFORE ITS EXPIRY DATE WILL RESULT
> > IN LOSS OF SERVICE.
> >
> > Registration Fees:
> >
> > 2 Years - $35/year
> > 3-5 Years - $25/year
> > 6-10 Years - $20/Year
> >
> > All costs are US Dollars.
> >
> > Should you have any questions on renewing your domain please contact
>renewal-help@domain-renewal.biz
> >
> > BIZ Domain Renewals
> > http://www.domain-renewal.biz
> >
> > ----------------------------------
> > If you no longer wish to receive domain renewal notifications see
>http://www.domain-renewal.biz/notifications.html
> > This email was sent to ***

The sooner public availability of customer data etc is restricted, the 
sooner we can prevent this sort of thing happening.

Kind regards,

Paul Westley
Internetters
UK