Spam through CIRA contact form (1 Viewing)

rlm said:

greatpin.info

Click to expand...

They all go to the same site with a different URL but all end in .info so that would be easy enough to limit.

Any email address ending in .info is limited to x3 emails daily. So if they have 12 domains they can only send 36 form requests.


A REAL Canadian prospect will not have an email address ending in .info anyways

I too have received several messages through the CIRA contact form for non-domain related matters. The bad guys have found another way to get to us, even when CIRA has taken steps to verify their emails. No stopping these bad guys I feel. But any further steps CIRA could take is welcome.

MapleDots said:

They all go to the same site with a different URL but all end in .info so that would be easy enough to limit.

Any email address ending in .info is limited to x3 emails daily. So if they have 12 domains they can only send 36 form requests.


A REAL Canadian prospect will not have an email address ending in .info anyways

Click to expand...

While that is true, this is honestly just a never ending game of whack-a-mole.

CIRA could easily be logging form submissions, including IP address and sender's email and it would be quite clear who is spamming and block them. However, that would require someone to periodically review the data, find the patterns and them block them.

BTW, the subject line changes, but the message is always the same:

Let me know if you need a logo / website made or SEO done for any of your website / domains. We can setup custom designed website at a very reasonable cost. Feel free to write back for a free quote and portfolio.

Click to expand...

While that is also an easy regex to match on, again, its just playing whack-a-mole.

What might be better is to allow the domain owner to click a link to mark that sender as spam. If the sender gets more than a couple domain owners marking them as spam, then automatically block that email address from submitting any more for 24 hours. If they realize they can only use the same email address to send a handful of messages before they get blocked, they'll realize it isn't worth the hassle.