Results 1 to 12 of 12
-
07-02-2003, 06:14 AM #1Web Hosting Master
- Join Date
- Sep 2000
- Posts
- 1,939
Why you need to be vigilant before fulfilling orders.
Hello
We received an order for a reseller account
today at 04:00 CST from a customer apprently in Montana.
It is very unusual to get an order like this in the middle of the night
so we have our own procedure for checking out orders like this.
The credit card passed AVS.
Mosy web hosting companies would have fulfilled the order based on this alone
but the 4am thing was just too suspicious.
The domain given on the form was not registered so I did some further digging:
1. Did a reverse look up on the phone number at www.switchboard.com
The house number on the order was 1200 in the phone book it was 12022
2. IP address order belonged to did not belong to eart***** (the email address was @eart*****)
3. Did a google search on the email address and found this:
http://groups.yahoo.com/group/itsoktosmoke/message/117
So the morale of the story is - if it looks like trouble and smells like trouble it probably is trouble.
The credit card number is almost certainly stolen and the account(s) would have been used for spamming.
I wil b ephoning the card holder in the morning.
I have three big clocks on the office wall (Vancouver, New York and London time)
Any orders falling outwith normal waking hours for these time zones gets seriously examined.
GordonFormerly: Managing Director, Hostroute.com Ltd & Marketing Director, Ultraspeed UK Ltd
View my Professional Profile: www.gordonhudson.com
-
07-02-2003, 06:22 AM #2Web Hosting Master
- Join Date
- Sep 2000
- Posts
- 1,939
OK
This is getting interesting now:
Got this email from the "customer":
>dam you are nosy
>dont worry about that, ill take care of the domain registrations, >geeez
Email realname was BULLET-PROOF-HOSTING
I replied with this:
Hello
> dam you are nosy
> dont worry about that, ill take care of the domain registrations, geeez
No we are not nosey.
Just concerned that:
1. Domain not registered
2. Order placed at 4am which is unusual
3. IP address order placed from does not belong to Eart*****.
4. Holder of credit card lives at 12022 66th not 1200 66th as stated on the
order.
5. You run a known spam operation
http://groups.yahoo.com/group/itsoktosmoke/message/117
6. http://www.spamhaus.org/rokso/search...dencefile=1867
Regards
Gordon Hudson
Hostroute.com Ltd
www.hostroute.netFormerly: Managing Director, Hostroute.com Ltd & Marketing Director, Ultraspeed UK Ltd
View my Professional Profile: www.gordonhudson.com
-
07-02-2003, 06:33 AM #3Web Hosting Master
- Join Date
- Feb 2002
- Location
- Australia
- Posts
- 24,027
Re: Why you need to be vigilant before fulfilling orders.
Originally posted by GordonH
. . . but the 4am thing was just too suspicious . . .• WLVPN.com • NetProtect owned White Label VPN provider •
• Increase your hosting profits by adding VPN to your product line up •
-
07-02-2003, 06:41 AM #4Web Hosting Master
- Join Date
- Sep 2000
- Posts
- 1,939
Well, i nm y experience an order coming in at 4am CST from a country like the UK or France would be legit
Coming from the US its unlikley to be a real order
as they tend to tail off at 2 to 3 am local time
Most of our fruds come in at 4 to 7am US time and really originate from south east asia.
GordonFormerly: Managing Director, Hostroute.com Ltd & Marketing Director, Ultraspeed UK Ltd
View my Professional Profile: www.gordonhudson.com
-
07-02-2003, 06:43 AM #5Web Hosting Master
- Join Date
- Sep 2000
- Posts
- 1,939
Latest from the spammer:
my little 'spam-outfit' has grossed over 160K this year.
you will never be more than a corporate automaton satisfied with the delusion of some insignificant power.
...so blind
"Go **** Yourself"Formerly: Managing Director, Hostroute.com Ltd & Marketing Director, Ultraspeed UK Ltd
View my Professional Profile: www.gordonhudson.com
-
07-02-2003, 06:44 AM #6Web Hosting Master
- Join Date
- Sep 2000
- Posts
- 1,939
http://www.silverbullethosting.net
(another of their sites)Formerly: Managing Director, Hostroute.com Ltd & Marketing Director, Ultraspeed UK Ltd
View my Professional Profile: www.gordonhudson.com
-
07-02-2003, 06:49 AM #7Web Hosting Master
- Join Date
- Sep 2000
- Posts
- 1,939
He has made death threats to spamhaus as well in the past:
http://www.spamhaus.org/rokso/spamme...=guest&-searchFormerly: Managing Director, Hostroute.com Ltd & Marketing Director, Ultraspeed UK Ltd
View my Professional Profile: www.gordonhudson.com
-
07-02-2003, 09:08 AM #8Junior Guru Wannabe
- Join Date
- May 2003
- Posts
- 38
These guys rank one (small) notch above convicts in my book. Useless to society yet constant drains on the economy.
-
07-02-2003, 09:49 AM #9Junior Guru
- Join Date
- Nov 2002
- Posts
- 232
He may have grossed $160k this year, but money means nothing if it is not honestly earned.
-
07-02-2003, 10:04 AM #10Web Hosting Master
- Join Date
- Sep 2000
- Posts
- 1,939
I didnt have the heart to tell him we had made many times that amount thsi year without behaving dishonestly.
Formerly: Managing Director, Hostroute.com Ltd & Marketing Director, Ultraspeed UK Ltd
View my Professional Profile: www.gordonhudson.com
-
07-02-2003, 10:11 AM #11Junior Guru
- Join Date
- Nov 2002
- Posts
- 232
Just tell him that it isn't the amount of money one earns, but what one does with it.
-
07-02-2003, 10:35 AM #12WHT Addict
- Join Date
- Feb 2003
- Posts
- 135
He sounds like he's watched the matrix or fight club one too many times.