From: "Dan Napier" Received: from [192.168.100.201] (HELO mail.2rosenthals.com) by 2rosenthals.com (CommuniGate Pro SMTP 5.4.10) with ESMTP id 11053800 for ecs-isp@2rosenthals.com; Sun, 29 Sep 2024 14:02:59 -0400 Received: from [192.168.200.201] (port=50705 helo=mail2.2rosenthals.com) by mail.2rosenthals.com with esmtp (Exim 4.97.1) (envelope-from ) id 1suyFu-000000001MM-1DEA for ecs-isp@2rosenthals.com; Sun, 29 Sep 2024 14:02:51 -0400 Received: from kaliss.dnacih.com ([47.180.217.131]:38482) by mail2.2rosenthals.com with esmtp (Exim 4.97.1) (envelope-from ) id 1suyFk-000000004ga-1wI9 for ecs-isp@2rosenthals.com; Sun, 29 Sep 2024 14:02:41 -0400 X-SASI-Hits: BODYTEXTP_SIZE_3000_LESS 0.000000, BODY_SIZE_2000_2999 0.000000, BODY_SIZE_5000_LESS 0.000000, BODY_SIZE_7000_LESS 0.000000, CN_TLD 0.100000, CTE_QUOTED_PRINTABLE 0.000000, DATE_TZ_NA 0.000000, DKIM_ALIGNS 0.000000, DKIM_SIGNATURE 0.000000, HTML_00_01 0.050000, HTML_00_10 0.050000, IN_REP_TO 0.000000, KNOWN_MSGID 0.000000, LEGITIMATE_SIGNS 0.000000, MSG_THREAD 0.000000, NO_URI_HTTPS 0.000000, REFERENCES 0.000000, SENDER_NO_AUTH 0.000000, SUPERLONG_LINE 0.050000, SUSP_DH_NEG 0.000000, TO_IN_SUBJECT 0.500000, __ANY_URI 0.000000, __BODY_NO_MAILTO 0.000000, __BOUNCE_CHALLENGE_SUBJ 0.000000, __BOUNCE_NDR_SUBJ_EXEMPT 0.000000, __CP_URI_IN_BODY 0.000000, __CT 0.000000, __CTE 0.000000, __CTYPE_CHARSET_QUOTED 0.000000, __CT_TEXT_PLAIN 0.000000, __DC_PHRASE 0.000000, __DKIM_ALIGNS_1 0.000000, __DKIM_ALIGNS_2 0.000000, __DQ_NEG_DOMAIN 0.000000, __DQ_NEG_HEUR 0.000000, __DQ_NEG_IP 0.000000, __FORWARDED_MSG 0.000000, __FRAUD_MONEY_CURRENCY 0.000000, __FRAUD_MONEY_CURRENCY_DOLLAR 0.000000, __FUR_HEADER 0.000000, __HAS_FROM 0.000000, __HAS_MSGID 0.000000, __HAS_REFERENCES 0.000000, __HAS_X_MAILER 0.000000, __HELO_LOCALHOST 0.000000, __HELO_LOCALHOST2 0.000000, __INT_PROD_LOC 0.000000, __INVOICE_MULTILINGUAL 0.000000, __IN_REP_TO 0.000000, __IOC_PHRASE 0.000000, __MAIL_CHAIN 0.000000, __MIME_BOUND_CHARSET 0.000000, __MIME_TEXT_ONLY 0.000000, __MIME_TEXT_P 0.000000, __MIME_TEXT_P1 0.000000, __MIME_VERSION 0.000000, __MULTIPLE_URI_TEXT 0.000000, __NO_HTML_TAG_RAW 0.000000, __OUTLOOK_MSGID_1 0.000000, __OUTLOOK_MUA 0.000000, __OUTLOOK_MUA_1 0.000000, __PHISH_PHRASE1_A 0.000000, __REFERENCES 0.000000, __SANE_MSGID 0.000000, __SCAN_D_NEG 0.000000, __SCAN_D_NEG2 0.000000, __SCAN_D_NEG_HEUR 0.000000, __SCAN_D_NEG_HEUR2 0.000000, __STOCK_PHRASE_7 0.000000, __SUBJ_ALPHA_END 0.000000, __SUBJ_ALPHA_NEGATE 0.000000, __SUBJ_REPLY 0.000000, __TO_IN_SUBJECT 0.000000, __TO_IN_SUBJECT2 0.000000, __TO_MALFORMED_2 0.000000, __TO_NAME 0.000000, __TO_NAME_DIFF_FROM_ACC 0.000000, __TO_REAL_NAMES 0.000000, __URI_IN_BODY 0.000000, __URI_MAILTO 0.000000, __URI_NOT_IMG 0.000000, __URI_NO_PATH 0.000000, __URI_NS 0.000000, __URI_NS_NXDOMAIN 0.000000, __URI_WITHOUT_PATH 0.000000, __USER_AGENT_MS_GENERIC 0.000000, __X_VIRUS_SCANNED 0.000000 X-SASI-Probability: 10% X-SASI-RCODE: 200 X-SASI-Version: Antispam-Engine: 5.1.4, AntispamData: 2024.9.29.171816 X-SASI-Hits: BODYTEXTP_SIZE_3000_LESS 0.000000, BODY_SIZE_2000_2999 0.000000, BODY_SIZE_5000_LESS 0.000000, BODY_SIZE_7000_LESS 0.000000, CN_TLD 0.100000, CTE_QUOTED_PRINTABLE 0.000000, DATE_TZ_NA 0.000000, DKIM_ALIGNS 0.000000, DKIM_SIGNATURE 0.000000, HTML_00_01 0.050000, HTML_00_10 0.050000, IN_REP_TO 0.000000, KNOWN_MSGID 0.000000, LEGITIMATE_SIGNS 0.000000, MSG_THREAD 0.000000, NO_URI_HTTPS 0.000000, REFERENCES 0.000000, SENDER_NO_AUTH 0.000000, SUPERLONG_LINE 0.050000, SUSP_DH_NEG 0.000000, TO_IN_SUBJECT 0.500000, __ANY_URI 0.000000, __BODY_NO_MAILTO 0.000000, __BOUNCE_CHALLENGE_SUBJ 0.000000, __BOUNCE_NDR_SUBJ_EXEMPT 0.000000, __CP_URI_IN_BODY 0.000000, __CT 0.000000, __CTE 0.000000, __CTYPE_CHARSET_QUOTED 0.000000, __CT_TEXT_PLAIN 0.000000, __DC_PHRASE 0.000000, __DKIM_ALIGNS_1 0.000000, __DKIM_ALIGNS_2 0.000000, __DQ_NEG_DOMAIN 0.000000, __DQ_NEG_HEUR 0.000000, __DQ_NEG_IP 0.000000, __FORWARDED_MSG 0.000000, __FRAUD_MONEY_CURRENCY 0.000000, __FRAUD_MONEY_CURRENCY_DOLLAR 0.000000, __FUR_HEADER 0.000000, __HAS_FROM 0.000000, __HAS_MSGID 0.000000, __HAS_REFERENCES 0.000000, __HAS_X_MAILER 0.000000, __HELO_LOCALHOST 0.000000, __HELO_LOCALHOST2 0.000000, __INT_PROD_LOC 0.000000, __INVOICE_MULTILINGUAL 0.000000, __IN_REP_TO 0.000000, __IOC_PHRASE 0.000000, __MAIL_CHAIN 0.000000, __MIME_BOUND_CHARSET 0.000000, __MIME_TEXT_ONLY 0.000000, __MIME_TEXT_P 0.000000, __MIME_TEXT_P1 0.000000, __MIME_VERSION 0.000000, __MULTIPLE_URI_TEXT 0.000000, __NO_HTML_TAG_RAW 0.000000, __OUTLOOK_MSGID_1 0.000000, __OUTLOOK_MUA 0.000000, __OUTLOOK_MUA_1 0.000000, __PHISH_PHRASE1_A 0.000000, __REFERENCES 0.000000, __SANE_MSGID 0.000000, __SCAN_D_NEG 0.000000, __SCAN_D_NEG2 0.000000, __SCAN_D_NEG_HEUR 0.000000, __SCAN_D_NEG_HEUR2 0.000000, __STOCK_PHRASE_7 0.000000, __SUBJ_ALPHA_END 0.000000, __SUBJ_ALPHA_NEGATE 0.000000, __SUBJ_REPLY 0.000000, __TO_IN_SUBJECT 0.000000, __TO_IN_SUBJECT2 0.000000, __TO_MALFORMED_2 0.000000, __TO_NAME 0.000000, __TO_NAME_DIFF_FROM_ACC 0.000000, __TO_REAL_NAMES 0.000000, __URI_IN_BODY 0.000000, __URI_MAILTO 0.000000, __URI_NOT_IMG 0.000000, __URI_NO_PATH 0.000000, __URI_NS 0.000000, __URI_NS_NXDOMAIN 0.000000, __URI_WITHOUT_PATH 0.000000, __USER_AGENT_MS_GENERIC 0.000000, __X_VIRUS_SCANNED 0.000000 X-SASI-Probability: 10% X-SASI-RCODE: 200 X-SASI-Version: Antispam-Engine: 5.1.4, AntispamData: 2024.9.29.171816 X-ASG-Debug-ID: 1727632028-101376704f1108c0001-4YkuuC Received: from scotty.dnacih.com (scotty.dnacih.com [64.60.60.125]) by kaliss.dnacih.com with ESMTP id X1XVHPTty9fR9bIb for ; Sun, 29 Sep 2024 10:47:08 -0700 (PDT) X-Barracuda-Envelope-From: dan@cihcsp.com X-Barracuda-Effective-Source-IP: scotty.dnacih.com[64.60.60.125] X-Barracuda-Apparent-Source-IP: 64.60.60.125 Received: from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon) with ESMTPA id 986696C0551 for ; Sun, 29 Sep 2024 10:47:05 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cihcsp.com; s=dkim; t=1727632026; h=from:subject:date:message-id:to:mime-version:content-type: content-transfer-encoding:content-language:in-reply-to:references; bh=7K0zddksbVGYFLsl96oUIZjCDFdi16w3q3vcemxIfrQ=; b=KGAZKDUxQTlNRAqNf/ZRAwkwuOFFr3oRnEWPoVoErOevjXcPSWW14nx2VwJCzVkX0FTWiT VsdELM7yOBbpxyaZKcvlyxG8keVEFV3TlFm1ZgaM9/6FCskF6KJzhD6hJmDqH6OfwxoPhr uwiU3wfd0JYs4kBumaEH2a0KuN6h9yM5XJRihx5i5MqGYsrkL5kXQruP0y9bJtePLBj9Dg QxyWSh/gCNszYtBuB5KdDB0mEkblTBf5s3YgTGX/dgj2FO3OAgrwVfnCQ7bM4aaIvsbSrN TQDcSskzSuJ3A1dMRL1mcq6i23QbpzIndORu2HvNIciINBRwov1Svwh/ieZ+qg== To: "'eCS ISP Mailing List'" References: In-Reply-To: Subject: RE: [eCS-ISP] Chinese domain names Date: Sun, 29 Sep 2024 10:47:05 -0700 X-ASG-Orig-Subj: RE: [eCS-ISP] Chinese domain names Message-ID: <68b801db1297$98f694a0$cae3bde0$@cihcsp.com> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQKsSoJJ/qzYkcLalbuPhEUqT2Kc7QIKn3IHApEm+Xywp7m10A== Content-Language: en-us X-Last-TLS-Session-Version: None X-Barracuda-Connect: scotty.dnacih.com[64.60.60.125] X-Barracuda-Start-Time: 1727632028 X-Barracuda-URL: https://47.180.217.131:443/cgi-mod/mark.cgi X-Barracuda-BRTS-Status: 1 X-Virus-Scanned: by bsmtpd at dnacih.com X-Barracuda-Scan-Msg-Size: 2612 X-Barracuda-Spam-Score: 1.50 X-Barracuda-Spam-Status: No, SCORE=1.50 using global scores of TAG_LEVEL=1000.0 QUARANTINE_LEVEL=1000.0 KILL_LEVEL=7.0 tests=BSF_SC3_MV0437 X-Barracuda-Spam-Report: Code version 3.2, rules version 3.2.3.131137 Rule breakdown below pts rule name description ---- ---------------------- -------------------------------------------------- 1.50 BSF_SC3_MV0437 Custom rule MV0437 Peter, The Scams are getting better. They used to include obvious grammatical = blunders. That way the people who responded were most likely gullible. = Now we see something else! Bu How! (Not Good). Some jackass called me and wanted his grandad (me) to send him $1000.00 = to get out of jail! I usually just hang up on them, but I was so = tempted. I told him that the last time was the last time, he feigned = tears! You gotta appreciate the talent these guys have! Dan Napier PS Definitely a SCAM -----Original Message----- From: eCS ISP Mailing List =20 Sent: Saturday, September 28, 2024 11:12 PM To: eCS ISP Mailing List Subject: Re: [eCS-ISP] Chinese domain names On 25/09/24 22:22, Ian Manners wrote: > Hi Peter, > >> I have been having an interesting exchange with a=20 > Chinese domain >> name registrar. Apparently a Chinese company wants to register the = >> domain names pmoylan.cn, pmoylan.org.cn, pmoylan.com.cn. The >> = registrar has noted the near-collision with my domain name, and has >> = offered me first chance at grabbing those names. >> >> I don't have good = grounds for objection because I don't want those >> Chinese domain = names. I'm curious, though, as to why any Chinese >> company would want = a pmoylan domain name. Any ideas? > > As others have said, its spam.=20 They just want to make a sale so send > it to similiar domains using = information scrapped from whois. > > Do not reply, simply delete it. > > = Cheers Ian Thanks to all who replied. Usually I can spot a scam, but = this one had a very realistic look. --=20 Peter Moylan peter@pmoylan.org http://www.pmoylan.org =3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D= -=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to = the DIGEST mode, E-mail to To switch to = the INDEX mode, E-mail to Send = administrative queries to To = subscribe (new addresses), E-mail to: and = reply to the confirmation email. Web archives are publicly available at: http://lists.2rosenthals.com This list is hosted by Rosenthal & Rosenthal, LLC P.O. Box 281, Deer = Park, NY 11729-0281. Non- electronic communications related to content = contained in these messages should be directed to the above address. = (CAN-SPAM Act of 2003) =3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D= -=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D