Comments on: .ASIA domain name scams still going strong http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/ News, Views, and Insight from the ESET Security Community Mon, 03 Feb 2014 08:49:00 +0000 hourly 1 http://wordpress.org/?v=3.7 By: Anonymous Me http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-4487 Tue, 21 Jan 2014 05:52:00 +0000 http://blog.eset.com/?p=14432#comment-4487 Received one just now & panicked!!! Thank you for sharing this information!

]]>
By: Sasan http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-4475 Wed, 15 Jan 2014 09:10:00 +0000 http://blog.eset.com/?p=14432#comment-4475 The same: in French we say ” arnaque ”
(Letter to Head of Brand
Business or CEO, thanks)

Dear Sir or Madam,

This is a formal email. We
are the department of Asian Domain Registration Service in China. Here I have
….
If you did not authorize, please let us know within 7
workdays, so that we could handle this issue better. After the deadline we will
unconditionally finish the registration for Win Hua Investments Ltd. Looking
forward to your prompt reply.

Best Regards

Derek Lau

Senior Consultant

Tel:+86.551-6349-5334

Fax:+86.551-6349-5344

Address:Tai
Hu Lu 15 Hefei, Anhui, China

]]>
By: paula http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-4454 Sun, 29 Dec 2013 08:18:00 +0000 http://blog.eset.com/?p=14432#comment-4454 we just receive same email:
——-
(Please forward to the President or Brand Owner, thanks)

Dear Brand Holder,

We are a registration agency of Asian Domain Registration Organization in China. I have something to confirm with you. We formally received an application on December 18th, 2013 that a company which self-styled “Shengfeng Investment Co.,Ltd” were applying to register “serbalencanapin” as their brand name and some domain names through our firm.

Now we are handling this registration, and after our initial checking, we found the name were similar to your company’s, so we need to check with you whether your company has authorized that company to register these names. If you authorized this, we will finish the registration at once. If you did not authorize, please let us know within 7 workdays, so that we will handle this issue better. Out of the time limit we will unconditionally finish the registration for “Shengfeng Investment Co.,Ltd”. Looking forward to your prompt reply.

Best Regards,

Mayer Lu
Registration Department
Office: +86-551-6512 0117
Fax: +86-551-6512 3308
=====

we should carefull of scam like this but still aware to secure domain and brand that important to your company.

]]>
By: Shafiqul Islam Jibon http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-4451 Thu, 26 Dec 2013 06:20:00 +0000 http://blog.eset.com/?p=14432#comment-4451 Hi,

We are also wondering that we received the following scam to our company mail. The concerned authority should punish them.

We are the department of Asian Domain Registration Service in China. I have
something to confirm with you. We formally received an application on December
24, 2013 that a company which self-styled “DVO nvestment Co” were applying to
gister “gscl” as their Brand Name and some domain names through our
firm.Now we are handling this registration, and after our initial checking, we
found the name were similar to your company’s, so we need to check with you
whether your company has authorized that company to register these names. If you
authorized this, we will finish the registration at once. If you did not
authorize, please let us know within 7 workdays, so that we will handle this
issue better. Out of the time limit we will unconditionally finish the
registration for “DVO nvestment Co”. Looking forward to your prompt reply.

]]>
By: Richard Leedham http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-4432 Wed, 18 Dec 2013 10:53:00 +0000 http://blog.eset.com/?p=14432#comment-4432 Here it is again on December 2013
Quote:
(Letter to Head of Brand Business or CEO, thanks)
Dear Sir or Madam,
This is a formal email. We are the department of Asian Domain Registration Service in China. Here I have something to confirm with you. We formally received an application on December 17, 2013 that a company claimed “Pen Industrial Co. Ltd” were applying to register as their Brand Name and some Asian countries top-level domain names through our firm.
Now we are handling this registration, and after our initial checking, we found the name were similar to your company’s, so we need to check with you whether your company has authorized that company to register these names. If you authorized this, we would finish the registration at once. If you did not authorize, please let us know within 7 workdays, so that we could handle this issue better. After the deadline we will unconditionally finish the registration for “Pen Industrial Co. Ltd”. Looking forward to your prompt reply.
Best Regards,

Sandy Yang

Senior ConsultantAddress:No.124 Changjiang Road,Hefei 230001,Anhui,China
Tel: (+86) 739-5266069
Fax:(+86) 739-5266169
UNQUOTE
This is followed by the website address which is in the form of a link:
“outbind://29-0000000059ADB4EA63A0D3119A380000B49D031104809D00/cid:Attr_12548281682″ and which shows as “www.dunic.org”

]]>
By: winfriend http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-4373 Wed, 27 Nov 2013 08:27:00 +0000 http://blog.eset.com/?p=14432#comment-4373 A new version from ‘powerwebsolutions.org’. On this fake website they are offering all kinds of domain name packages.

****
To whom it may concern:

We are the Department of Asian Domain Registration Service in China. We have something to confirm with you. On November 27, 2013, we received an application in which a company by the name Wabc Group applied to register ” sjokoladefossen” as their Brand Name and some Asia domain names through our firm.

Now we are handling this registration. After our initial checking, we found that the name are identical to your company’s. We need to check with you whether your company has authorized that company to register these names. If you have authorized this, we will finish the registration at once. If not, please let us know within 7 workdays, in which case we will dicuss the matter more thoroughly. If not otherwise advised within that time limit we will proceed with the registration for Wabc Group . We will be waiting for your reply. Have a nice day!

Best Regards

Bruce Jin

Registration Dept. Manager
Phone: +86.55165184482

Fax: +86.55165128742

Address:AnGao World Cities,No. 88, Hezuohua South Road,HeFei City,AnHui Province,China

(including a small jpeg with their names and a hotlink )

]]>
By: Alex Alex http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-4371 Sun, 24 Nov 2013 09:17:00 +0000 http://blog.eset.com/?p=14432#comment-4371 (To anyone who might be
concerned)

Dear Sir or Madam,

This is a formal email. We are the department of Asian Domain Registration Service in China. Here I have something to confirm with you. We formally received an application on November 22, 2013 that a company claimed “Toco industries” were applying to register “xxxxxxx” as their Brand Name and some “xxxxxxx” Asian
countries top-level domain names through our firm.

Now we are handling this registration, and after our initial checking, we found the name were similar to your company’s, so we need to check with you whether your company has authorized that company to register these names. If you authorized this, we would finish the registration at once. If you did not authorize, please let us
know within 7 workdays, so that we could handle this issue better. After the
deadline we will unconditionally finish the registration for “Toco
industries”. Looking forward to your prompt reply.

Best Regards,
Mark Wong
Tel: +86-551-64653920 || Fax: +86-551-64653980
Address:No.155, Jinzhai Road, Shushan District, Hefei gold square Building 5. China.

]]>
By: stormuk69 http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-4340 Tue, 12 Nov 2013 10:35:00 +0000 http://blog.eset.com/?p=14432#comment-4340 Confirmed my suspicions….Thanks.

Carol Sun [mailto:Carol@wnservice.cn]

(Letter to the President or Brand Owner, thanks)

Dear Sir or Madam,

We are the department of Asian
Domain Registration Service in China. Here I have something to confirm with
you. We formally received an application on November11, 2013 that a company
claimed “Ya & DT Export Corporation” were applying to register
“your domain” as their Brand Name and some domain names through our
firm.

Now we are handling this
registration and after our initial checking, we found the names are similar to
your company’s, so we need to check with you whether your company has
authorized that company to register these names. If you authorized this, we
would finish the registration at once. But if you did not authorize, please let
us know within 7 workdays, so that we could handle this issue better. After the
deadline, we will unconditionally finish the registration for “Ya & DT
Export Corporation”. I am looking forward to your prompt reply.

Best
Regards,

Carol Sun

]]>
By: Gerd A. Zimmermann http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-4336 Mon, 11 Nov 2013 08:54:00 +0000 http://blog.eset.com/?p=14432#comment-4336 We received today (Nov.10) the scam message from the Asians about our domain usgermanlawyers. Thanks for your good report

]]>
By: Luobo Ye http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-4309 Wed, 30 Oct 2013 03:49:00 +0000 http://blog.eset.com/?p=14432#comment-4309 Reply by NiceNIC.NET http://nicenic.net

To avoid such scam, we would suggest domainers/domain Registrants to register/transfer .CN, .HK domain names with Accredited domain Registrars.

To check whether a website/company got accredited or not, the following links for Asian domain Registries would be required

For .CN Domain Registration:

http://www.cnnic.cn/jczyfw/CNym/cnzcfwjgcx/cnzcjg_ndsq/201206/t20120614_28273.htm (Domestic CNNIC Accredited Registrar)

http://www.cnnic.cn/jczyfw/CNym/cnzcfwjgcx/cnzcjg_ndsq/201207/t20120702_30267.htm (Overseas CNNIC Accredited Registrar)

For .HK Domain Registration:

https://www.hkirc.hk/content.jsp?id=280

]]>
By: UKlou http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-4278 Fri, 11 Oct 2013 17:26:00 +0000 http://blog.eset.com/?p=14432#comment-4278 Funny that, I had that exact email word for word apart from the company name from someone else today who calls himself Nicholas Chen from the D.U. Net Information Center Ltd, 124, Changjiang Road, Hefei 230001, Anhui, China

]]>
By: shawnsBrain http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-4277 Fri, 11 Oct 2013 14:58:00 +0000 http://blog.eset.com/?p=14432#comment-4277 We got on today. I immediately determined it was a scam. This site affirmed my suspicion. Thanks.

]]>
By: LukasEder http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-4276 Fri, 11 Oct 2013 07:13:00 +0000 http://blog.eset.com/?p=14432#comment-4276 Got this just now:

(Letter to Head of Brand
Business or CEO, thanks)

Dear Sir or Madam,

This is a formal email. We
are the department of Asian Domain Registration Service in China. Here I have
something to confirm with you. We formally received an application on October
10,2013 that a company claimed GJHG Co.,Ltd were applying to register
“datageekery” as their Brand Name and some domain names through our
firm.

Now we are handling this
registration, and after our initial checking, we found the name were similar to
your company’s, so we need to check with you whether your company has
authorized that company to register these names. If you authorized this, we
would finish the registration at once. If you did not authorize, please let us
know within 7 workdays, so that we could handle this issue better. After the
deadline we will unconditionally finish the registration for that
company.Looking forward to your prompt reply.

Best Regards,

Lex Ren

Tel:+86-551-6343 4624

Fax:+86-551-6343 4924

Address:Ningguo South Road 14, Hefei, Anhui, CN

]]>
By: DonZalmrol http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-4236 Thu, 12 Sep 2013 07:30:00 +0000 http://blog.eset.com/?p=14432#comment-4236 Received today:

(To anyone who might be concerned)

Dear Sir/Madam,

We are the department of Asian Domain Registration Service in China. Here I have something to confirm with you. We formally received an application on Sept.12,2013 that a company claimed TBC-Intl Co.,LTD were applying to register “xxxxxx” as their Brand Name and some yyyyyyy Asian countries top-level domain names through our firm.

Now we are handling this registration, and after our initial checking, we found the name were similar to your company’s, so we need to check with you whether your company has authorized that company to register these names. If you authorized this, we would finish the registration at once. If you did not authorize, please let us know within 7 workdays, so that we could handle this issue better. After the deadline we will unconditionally finish the registration for TBC-Intl Co.,LTD.Looking forward to your prompt reply.

Best Regards,
Bob Zhu
Tel: +86-551-64653920 || Fax: +86-551-64653980
Address:No.155, Jinzhai Road, Shushan District, Hefei gold square Building 5. China.

]]>
By: Dee http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-4199 Thu, 29 Aug 2013 13:30:00 +0000 http://blog.eset.com/?p=14432#comment-4199 Received today:

I’m sorry to disturb you so abruptly. But we need to confirm something important with you.

We are a department of registration service in China.On August 29,2013, we received an application form from a company named “WanJin international Co.,Ltd” who applied for the Brand Name “xxxxxxxxxx” and some relevant domain names registration through us. However,we need to confirm a couple of things with you before we finish the registration of that company:

1. If your company consigns that company to register these domain names and Brand Name, we will help them finish the registration at once.

2. If your company has nothing to do with that company, then they maybe have other purposes to register these domain names and Brand Name.

In order to deal with this issue better, please contact us by telephone or email within 7 workdays. otherwise we will unconditionally approve the application submitted by that company.

Best Regards,

Ann An

Registration Department
Phone: +86-55165120117
Fax: +86-55165123308
Fax: +86-55165123308

]]>
By: Yury http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-4132 Thu, 15 Aug 2013 17:26:00 +0000 http://blog.eset.com/?p=14432#comment-4132 Thank you, Aryeh!
I just received a similar e-mail and suspected fraud. I found your article and all became clear.

]]>
By: JM http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-4113 Thu, 08 Aug 2013 07:10:00 +0000 http://blog.eset.com/?p=14432#comment-4113 (Please forward to the President or Brand Owner, thanks)

Dear Brand Holder,
We are a registration agency of
Asian Domain Registration Organization in China. I have something to confirm
with you. We formally received an application on August 7, 2013 that a company
which self-styled “Huanghe International Co.,Ltd” were applying to register
“xxxxxxxxxxxxxx” as their brand name and some domain
names through our firm.

Now we are handling this registration, and after our
initial checking, we found the name were similar to your company’s, so we need
to check with you whether your company has authorized that company to register
these names. If you authorized this, we will finish the registration at once. If
you did not authorize, please let us know within 7 workdays, so that we will
handle this issue better. Out of the time limit we will unconditionally finish
the registration for “Huanghe International Co.,Ltd”. Looking forward to your
prompt reply.

Best
Regards,

——————————

Mike Cao

Registration Department

Office:
+86-551-6512-0117
Fax Number:
+86-551-6512-3308

]]>
By: ACJ http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-4107 Tue, 06 Aug 2013 07:54:00 +0000 http://blog.eset.com/?p=14432#comment-4107 Thanks for this very helpful article!! I just received this morning the same spam from this address louis@dus-web.org.cn:

(It’s very urgent, Please transfer this email to your CEO or appropriate person, thanks)

Dear CEO,

We are the institution for registration service in the People’s Republic of China.We formally received an application on August 5th, 2013 that a company claimed ”Q.Z. Int’l Co., Ltd” were applying to register”yyy”as their Brand name and some “yyy” domain names through us.

Now we are handling this registration, and after our initial checking, we found the name were similar to your company’s, so we need to check with you whether your company has authorized that company to register these names. If you authorized this, we would finish the registration at once. If you did not authorize, please let us know within 5 workdays, so that we could handle this issue better. After the deadline we will unconditionally finish the registration for ”Q.Z. Int’l Co., Ltd”.

Looking forward to your prompt reply.

Best Regards,

Louis Zha
Tel:+86-0551-63495334
Fax:+86-0551-63495344
Address:WangJiang East Road 20, Hefei, Anhui, China

]]>
By: ChicShop.com.au http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-4104 Mon, 05 Aug 2013 14:44:00 +0000 http://blog.eset.com/?p=14432#comment-4104 Received the same letter. Thank you for the info.

]]>
By: McInk http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-4095 Tue, 30 Jul 2013 16:27:00 +0000 http://blog.eset.com/?p=14432#comment-4095 Rec’d July 30 2012

(Letter to the President or Brand Owner, thanks)

Dear President,

We are a domain name registration and protection agency in Asia. I have
something to confirm with you. We formally received an application on July
29,2013 that a company which self-styled”Pau Investment Co.,Ltd”were applying to
register”xxxxxxx”as their Brand Name and some domain names through our
firm.

Now we are handling this registration, and after our initial checking, we
found the name were similar to your company’s, so we need to check with you
whether your company has authorized that company to register these names. If you
authorized this, we will finish the registration at once. If you did not
authorize, please let us know within 7 workdays, so that we will handle this
issue better. Out of the time limit we will unconditionally finish the
registration for”Pau Investment Co.,Ltd”.Looking forward to your prompt
reply.

Best Regards,

David Zhao

Tel:+86.55163495334
Fax:+86.55163495344
Address:MaAnShan Road
700, Hefei, Anhui, China
http://www.dsa.register.org

]]>
By: PTGuy http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-4076 Fri, 19 Jul 2013 13:55:00 +0000 http://blog.eset.com/?p=14432#comment-4076 Received: 07/2013
Subject: Urgent notice about “XXXXXX” Brand dispute and registration

(Letter to the President or Brand Owner, thanks)

Dear Sir/Madam,

We are the department of Asian Domain Registration Service in China. Here I have something to confirm with you. We formally received an application on July 15, 2013 that a company claimed “Pom Global Ltd” were applying to register “XXXXXX” as their Brand Name and some domain names through our firm.

Now we are handling this registration, and after our initial checking, we found the name were similar to your company’s, so we need to check with you whether your company has authorized that company to register these names. If you authorized this, we would finish the registration at once. If you did not authorize, please let us know within 7 workdays, so that we could handle this issue better. After the deadline we will unconditionally finish the registration for “Pon Global Ltd”Looking forward to your prompt reply.

Gavin Hai
Tel:+86.55163434624 || Fax:+86.55163434924
Address:HuiZhou Ave 999, Hefei, Anhui, China
Website:www.des-registry.org

]]>
By: MemyselfandI http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-4071 Fri, 05 Jul 2013 04:15:00 +0000 http://blog.eset.com/?p=14432#comment-4071 Received this one last week:

(Letter to the President or Brand Owner, thanks)

Dear President,

We are a domain name registration and protection agency in Asia. I have
something to confirm with you. We formally received an application on June
26,2013 that a company which self-styled”Woj International Holdings Ltd”were
applying to register”xxx”as their Brand Name and some domain names through
our firm.

Now we are handling this registration, and after our initial checking, we
found the name were similar to your company’s, so we need to check with you
whether your company has authorized that company to register these names. If you
authorized this, we will finish the registration at once. If you did not
authorize, please let us know within 7 workdays, so that we will handle this
issue better. Out of the time limit we will unconditionally finish the
registration for”Woj International Holdings Ltd”.Looking forward to your prompt
reply.

Best Regards,

David Zhao

Tel:+86(0551)63434624

Fax:+86(0551)63434924
Add:MaAnShan Road 688, Hefei,
Anhui,China

—————————

Unfortunately and ashamedly I DID reply to state that the company was not authorized and told them not to proceed, and asked them what this other company’s business is. Their reply, which stated that they are in the same business I am but that it’s a secret and I shouldn’t ask again is what confirmed for me that it was a scam. I haven’t responded since and so have now received several emails from them, each one more and more urgent (read as “desperate”) and telling me I need to register these domain names before the other company if I feel it’s important to protect my brand. Again, haven’t responded to any of these.

This was the latest email received yesterday:

Dear Sir,

In the “xxx” related Domain name dispute case processing,we will no
long give you more time to delayed forever.
I had divert this case to our
registration department already. Now you understood the policy of Domain name
dispute and registration very clear. But you still have not give us a reply till
now. According to the policy we see you give up all those Domain names.
If
you can not give us a reply before July
5,
2013, we shall Formally pass through that company’s
registration.And we will not bear any responsibility due this

registration.

Best Regards,

David Zhao ||
Tel:86(0551)63434624|| Fax:86(0551)63434924

]]>
By: Dario Maggio http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-4069 Wed, 03 Jul 2013 09:56:00 +0000 http://blog.eset.com/?p=14432#comment-4069 Just received 5 min ago… It looks they are still alive.. but now Derek Lau is the Senior Consultant, but extremly nice is the applying company Name: KICK SAS Limited :)

“(Letter to
Head of Brand Business or CEO, thanks)

Dear Sir or
Madam,

This is a
formal email. We are the department of Asian Domain Registration Service in
China. Here I have something to confirm with you. We formally received an
application on July 3, 2013 that a company claimed KICK SAS LIMITED were
applying to register “xxxxxx” as their brand name and some xxxxx
Asian countries top-level domain names through our firm.

Now we are handling this registration, and after our initial checking, we found the name were similar to your company’s, so we need to check with you whether your
company has authorized that company to register these names. If you authorized
this, we would finish the registration at once. If you did not authorize,
please let us know within 7 workdays, so that we could handle this issue
better. After the deadline we will unconditionally finish the registration for
KICK SAS LIMITED. Looking forward to your prompt reply.”

]]>
By: hillel sims http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-4062 Thu, 20 Jun 2013 14:18:00 +0000 http://blog.eset.com/?p=14432#comment-4062 I just got the same message, but I knew it looked fake, so I did not reply.

(It’s very urgent, so please transfer
this email to your CEO or appropriate person. Thanks a lot.)

Dear CEO/Principal,

We are the department of Asian Domain
Registration Service in China. Here I have something to confirm with you. We
formally received an application on June 20, 2013
that a company claimed “Cantyeng Company” were
applying to register “xxxxx” as their Net
Brand and some “xxxxx” Asian countries
top-level domain names through our firm.

Now we are handling this
registration, and after our initial checking, we found the name were similar to
your company’s, so we need to check with you whether your company has authorized
that company to register these names. If you authorized this, we would finish
the registration at once. If you did not authorize, please let us know within 7
workdays, so that we could handle this issue better. After the deadline we will
unconditionally finish the registration for “Cantyeng Company” Looking
forward to your prompt
reply.

Best Regards,

Andy Zhang
Senior Consultant
Manager

]]>
By: scam http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-4057 Wed, 19 Jun 2013 16:28:00 +0000 http://blog.eset.com/?p=14432#comment-4057 Here is my Scam – but the funny thing is that ‘Sandy’ doesn’t say a word that she could register these domain names for me!? Normally there is a BIG link, instructions, etc to do so – but with this Scam NOTHING. I am a bit surprised…

here is her email (sent from Sandy Sun )

——————————————————-
(Letter to the President or Brand Owner, thanks)

Dear President,

We are the department of Asian Domain Registration Service in China. I
have something to confirm with you. We formally received an application on
June 18, 2013 that a company which self-styled “SHT Int’l Investment
Ltd” were applying to register “YOUR COMPANY NAME HERE” as their Brand Name and some
domain names through our firm.

Now we are handling this registration, and after our initial checking, we
found the name were similar to your company’s, so we need to check with you
whether your company has authorized that company to register these names. If
you authorized this, we will finish the registration at once. If you did not
authorize, please let us know within 7 workdays, so that we will handle this
issue better. Out of the time limit we will unconditionally finish the
registration for “SHT Int’l Investment Ltd”. Looking forward to your
prompt reply.

Best Regards,
Sandy Sun

]]>
By: STANDOUT INTERNSHIPS http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-4054 Thu, 13 Jun 2013 02:56:00 +0000 http://blog.eset.com/?p=14432#comment-4054 I received this email last week from ethan@tsnetnic.com … unfortunately I replied and now I am being hounded to register the domain. Fortunately I found your website and am going to just delete the emails from now on … THANK YOU!

“Dear President,

We are the department of Asian Domain Registration Service in China. I have something to confirm with you. We formally received an application on May 25, 2013 that a company which self-styled “Kuea Co.,Ltd”. were applying to register some “standoutinternships” Asian countries top-level domain names.

Now we are handling this registration, and after our initial checking, we found the name were similar to your company’s, so we need to check with you whether your company has authorized that company to register these names. If you authorized this, we will finish the registration at once. If you did not authorize, please let us know within 7 workdays, so that we will handle this issue better.

Best Regards,
Ethan Jiang
Senior Manager
Tel: +0086-28-85915586 || Fax: +0086-28-85912116
9/F,No.4 Guanghua building,JiangDong Road,Chenghua District,Chengdu City,China”

]]>
By: fake http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-4019 Sun, 12 May 2013 10:57:00 +0000 http://blog.eset.com/?p=14432#comment-4019 e formally received an application on November 1, 2012 that a company which self-styled “yyyy” were applying to register “xxxxx” as their Net Brand and

]]>
By: dhherold http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-4003 Mon, 06 May 2013 13:46:00 +0000 http://blog.eset.com/?p=14432#comment-4003 Received the identical letter from “Wendy Chang,” except for date – May 3, 2013. Thanks for posting!

]]>
By: Maxo http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-3995 Sat, 04 May 2013 18:45:00 +0000 http://blog.eset.com/?p=14432#comment-3995 From: Derek Lau [mailto:derek@d3-network.org.cn]
Sent: Friday, May 03, 2013 3:34 AM
To: john
Subject: Re: Re: Re: RE: “xxxxxxxxxx”
Importance: High

Notice: Hi, I am Derek Lau. We had discussed the case about disputing your company’s domain names and Brand Name. You have never registered these domain names and Brand Name, and I had told you that the domain name registration is open. The dispute period will expire soon. If your company does not register these domain names and Brand Name, we will finish aforesaid company registration within 2 workdays. that company will become the legal owner of these domain names in the world. We had notified you, so we are not responsible for any dispute question about your intellectual property right and trademark after they succeed in registration. If you have any questions, pls contact us within 2 workdays.

Best Regards,

Derek Lau
Senior Consultant || Tel:+86.551/63495334 Fax:+86.551/63495344

]]>
By: Maxo http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-3994 Sat, 04 May 2013 18:22:00 +0000 http://blog.eset.com/?p=14432#comment-3994 From: Derek Lau [mailto:derek@d3-network.org.cn]
Sent: Thursday, April 25, 2013 6:12 AM
Subject: “cityislanders”
Importance: High

(Letter to Head of Brand Business or CEO, thanks)
Dear Sir or Madam,
This is a formal email. We are the department of Asian Domain Registration Service in China. Here I have something to confirm with you. We formally received an application on April 25, 2013 that a company claimed E. Long investment Ltd were applying to register “cityislanders” as their brand name and some cityislanders Asian countries top-level domain names through our firm.
Now we are handling this registration, and after our initial checking, we found the name were similar to your company’s, so we need to check with you whether your company has authorized that company to register these names. If you authorized this, we would finish the registration at once. If you did not authorize, please let us know within 7 workdays, so that we could handle this issue better. After the deadline we will unconditionally finish the registration for E. Long investment Ltd. Looking forward to your prompt reply.

Best Regards

Derek Lau

Senior Consultant
Tel:+86.551/63495334 Fax:+86.551/63495344

Address:HuiZhou Ave# 700, Hefei, Anhui, China

]]>
By: dharleyatESET http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-3988 Thu, 02 May 2013 19:35:00 +0000 http://blog.eset.com/?p=14432#comment-3988 These scams tend not to originate within the US and are very numerous, so reporting it within the US won’t necessarily inspire much action. You could try this site for information on where to report scams: http://www.consumerfraudreporting.org/reporting.php

]]>
By: Alex Schindler http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-3984 Thu, 02 May 2013 15:24:00 +0000 http://blog.eset.com/?p=14432#comment-3984 Yes. I have received this email. Is there any one I can report this to. Local Police…FBI, State Department? Any advice is helpful.

]]>
By: Stephen Cobb http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-3973 Tue, 30 Apr 2013 18:19:00 +0000 http://blog.eset.com/?p=14432#comment-3973 Thanks for sharing.

]]>
By: Yonas http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-3970 Tue, 30 Apr 2013 15:53:00 +0000 http://blog.eset.com/?p=14432#comment-3970 URGENT Brand Registration Confirmation:

(Letter to Head of Brand Business or CEO, thanks)

Dear Sir or Madam,

This is a formal email. We are the department of Asian Domain Registration
Service in China. Here I have something to confirm with you. We formally
received an application on April 29,2013 that a company claimed BEZX Investment
Ltd were applying to register “example” as their Brand Name and some domain
names through our firm.

Now we are handling this registration, and after our initial checking, we
found the name were similar to your company’s, so we need to check with you
whether your company has authorized that company to register these names. If you
authorized this, we would finish the registration at once. If you did not
authorize, please let us know within 7 workdays, so that we could handle this
issue better. After the deadline we will unconditionally finish the registration
for that company.Looking forward to your prompt reply.

Best Regards,

Mark Ren

Tel:
+86.551/63434624
Fax:+86.551/63434924
Address:No.650 HuiZhou
Ave,Hefei,Anhui,China

]]>
By: NLW http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-3965 Wed, 24 Apr 2013 18:24:00 +0000 http://blog.eset.com/?p=14432#comment-3965 They seem to have changed the template. Received today.
“Thanks and br” ???

Wendy
Apr 23
to booking

Dear CEO or Director,
We are a senior domain registrar in Hong Kong.

1.On Apr.22, 2013, a company named Seinid Investment Co.applied for registering the following Top-Level-Domains with us.

DomainName.asia
DomainName.cn
DomainName.com.cn
DomainName.com.hk
DomainName.com.tw

2.Whether did you consign Seinid to register these Domains? Or are they your subbranch?

Should you have any questions, pls do not hesitate to contact me.

Tks & br,
Wendy Cheng
Tel: +852_3050_6765
Fax: +852_3069_7409
wch@hkcreating.com
http://www.hkcreating.hk/

]]>
By: NLW http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-3947 Wed, 10 Apr 2013 01:20:00 +0000 http://blog.eset.com/?p=14432#comment-3947 As the domain owner is a live music venue in North America, this too was a out-of-context phish.

Received 2013-04-19
——————————————————————————————-
From Sylvia Lee Tue Apr 9 17:48:59 2013
X-Apparently-To: ZZZZZZZ@ZZZZZZ via 98.138.210.232; Tue, 09 Apr 2013 17:49:14 -0700
Return-Path:
Received-SPF: none (domain of publicbrand.org does not designate permitted sender hosts)
X-Originating-IP: [209.190.25.90]
Authentication-Results: mta1122.mail.gq1.yahoo.com from=publicbrand.org; domainkeys=neutral (no sig); from=publicbrand.org; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mail3.ZZZZZZZZZ) (209.190.25.90)
by mta1122.mail.gq1.ZZZZZZZZZ with SMTP; Tue, 09 Apr 2013 17:49:13 -0700
Received: from mail.mail14.cn4e.com (mail.mail14.cn4e.com [218.85.138.14])
by mail3.ZZZZZZZZZZZZ (Postfix) with ESMTP id 451812C4651;
Tue, 9 Apr 2013 17:31:05 -0700 (PDT)
Received: from sylviapc (unknown [114.96.136.244])

by mail.mail14.cn4e.com (Postfix) with ESMTPA id C14941900DA;
Wed, 10 Apr 2013 08:48:53 +0800 (CST)
From: “Sylvia Lee”
To:
Subject: URGENT: ZZZZZZZZZZZ Brand Registration Confirmation!
Date: Wed, 10 Apr 2013 08:48:59 +0800
Message-Id:
X-Mailer: DreamMail 4.6.9.2
URGENT: ZZZZZZZZZZ Brand Registration Confirmation!
(Please forward to the President or Brand Owner, thank you)

Dear Sir/Madam,

We are a registration agency of Asian Domain Registration Organization in China. I have something to confirm with you. We formally received an application on April 9, 2013 that a company which self-styled “Pus Int’l Co Ltd” were applying to register “zzzzzzzzzzzzz” as their Brand Name and some domain names through our firm.

Now we are handling this registration, and after our initial checking, we found these names were similar to your company’s, so we need to check with you whether your company has authorized that company to register these names. If you authorized this, we will finish the registration at once. If you did not authorize, please let us know within 7 workdays, so that we will handle this issue better. Out of the time limit we will unconditionally finish the registration for “Pus Int’l Co Ltd”. Looking forward to your prompt reply.

Best Regards,

Sylvia Lee
Registration Department
Tel: +86-551-65184482 || Fax: +86-551-65123308

Address: No.288 Jinzhai Road, ShuShan District, Hefei, Anhui, China
2013-4-9

]]>
By: Giselle Vassaux http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-3934 Mon, 01 Apr 2013 08:29:00 +0000 http://blog.eset.com/?p=14432#comment-3934 Thanks for posting this, I received a similar scam mail like the ones described, from:
ashin@tsnettech.com
I did not respond.

]]>
By: patrick.burke123@btinternet.co http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-3931 Wed, 27 Mar 2013 12:19:00 +0000 http://blog.eset.com/?p=14432#comment-3931 I’ve taken a look at the mail server they’re sending from:

Registrant:
35.com technology co.,ltd. +86.5925391800 +86.5925391808
35.com technology co.,ltd.
35.COM BLDG, 8th Guanri Road, Software Park
XIAMEN,FUJIAN,CN 361008

Domain Name:cn4e.com
Record last updated at 2013-03-13 02:04:31
Record created on 8/13/2000
Record expired on 08/13/2014

Domain servers in listed order:
ns1.dns-diy.com ns2.dns-diy.com

Administrator:
name:(Gongshaohui)
Email:() tel– +86.5925391800
fax:(+86.5925391808)
35.com technology co.,ltd.
35.COM BLDG, 8th Guanri Road, Software Park
XIAMEN
FUJIAN,
CN

zipcode:361008

Technical Contactor:
name:(35.com technology co.,ltd.)
Email:() tel– +86.5925391800
fax:(+86.5925391808)
35.com technology co.,ltd.
35.COM BLDG, 8th Guanri Road, Software Park
XIAMEN
FUJIAN,
CN

zipcode:361008

Billing Contactor:
name:(35.com technology co.,ltd.)
Email:() tel– +86.5925391800
fax:(+86.5925391808)
35.com technology co.,ltd.
35.COM BLDG, 8th Guanri Road, Software Park
XIAMEN
FUJIAN,
CN

zipcode:361008
Feel free to use as you wish.

]]>
By: Silvia http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-3930 Wed, 27 Mar 2013 09:34:00 +0000 http://blog.eset.com/?p=14432#comment-3930 I have just received a mail from a department of Asian Domain
Registration Service in China :D

]]>
By: Vedrana Vrebac http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-3929 Wed, 27 Mar 2013 07:19:00 +0000 http://blog.eset.com/?p=14432#comment-3929 Hello from Croatia! Today I got same e-mail from Danny Ge, danny@d3-net.org.cn. Glad I searched for him in Google before replying. Thanks for sharing this information!

]]>
By: Stephen Cobb http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-3925 Tue, 26 Mar 2013 22:57:00 +0000 http://blog.eset.com/?p=14432#comment-3925 Thanks for sharing John.

]]>
By: john http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-3923 Tue, 26 Mar 2013 13:42:00 +0000 http://blog.eset.com/?p=14432#comment-3923 Thanks for the post. I just got this variation of the e-mail. (Note: I replaced our company name with “XXX” for anonymity.

++++++++++++++++++
From: Mark
Ren

Date: Tue, 26 Mar 2013 18:19:16 +0800

Subject: URGENT “XXX” Brand
Registration Confirmation

(Letter to Head of Brand
Business or CEO, thanks)

Dear Sir or Madam,

This is a formal email. We
are the department of Asian Domain Registration Service in China. Here I have
something to confirm with you. We formally received an application on March
25,2013 that a company claimed LOE Int’l Ltd were applying to register
“XXX” as their Brand Name and some domain names through our firm.

Now we are handling this
registration, and after our initial checking, we found the name were similar to
your company’s, so we need to check with you whether your company has
authorized that company to register these names. If you authorized this, we
would finish the registration at once. If you did not authorize, please let us
know within 7 workdays, so that we could handle this issue better. After the
deadline we will unconditionally finish the registration for that
company.Looking forward to your prompt reply.

Best Regards,

Mark Ren

Tel:
+86.551/63434624

Fax:+86.551/63434924

Address:No.650 HuiZhou Ave,Hefei,Anhui,China

]]>
By: Damu http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-3917 Thu, 21 Mar 2013 19:28:00 +0000 http://blog.eset.com/?p=14432#comment-3917 today i got same email for my brand “codefight”, it seemed almost real :)

]]>
By: Stephen Cobb http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-3914 Tue, 19 Mar 2013 19:10:00 +0000 http://blog.eset.com/?p=14432#comment-3914 Helping out around the world, it’s what we live for!

]]>
By: Stephen Cobb http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-3906 Tue, 19 Mar 2013 17:18:00 +0000 http://blog.eset.com/?p=14432#comment-3906 Well done Paul, you did not fall for their tactics. This is a really pernicious scheme and one we are watching closely.

]]>
By: Stephen Cobb http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-3900 Tue, 19 Mar 2013 17:06:00 +0000 http://blog.eset.com/?p=14432#comment-3900 Thanks for sharing Marc!

]]>
By: Stephen Cobb http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-3896 Tue, 19 Mar 2013 16:58:00 +0000 http://blog.eset.com/?p=14432#comment-3896 Thanks for sharing!

]]>
By: OneEyed http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-3883 Tue, 12 Mar 2013 06:35:00 +0000 http://blog.eset.com/?p=14432#comment-3883 Since the domain in question belonged to a minor country & western band, I had no reservations about foreign domain TLDs, especially .CN and .ASIA, haha.

From: Danny Ge
Date: Mon, Mar 11,
2013 at 1:43 AM
Subject: Notice about dispute domain ####### registration
To:

(Letter to Head of Brand Business or CEO, thanks)

Dear Sir or Madam,

This is a formal email. We are the department of Asian Domain Registration Service in China. Here I have something to confirm with you. We formally received an application on March 11, 2013 that a company claimed E-Key International Ltd were applying to register “#######” as their Brand Name and some rogermarin Asian countries top-level domain names through our firm.

Now we are handling this registration, and after our initial checking, we found the name were similar to your company’s, so we need to check with you whether your company has authorized that company to register these names. If you authorized this, we would finish the registration at once. If you did not authorize, please let us know within 7 workdays, so that we could handle this issue better. After the deadline we will unconditionally finish the registration for E-Key International Ltd. Looking forward to your
prompt reply.

Best Regards,

Danny Ge

Tel: +86.551/63495334
Fax:+86.551/63495344
Address:HuiZhou Ave# 700, Hefei, Anhui, China

]]>
By: Marc http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-3880 Thu, 07 Mar 2013 08:06:00 +0000 http://blog.eset.com/?p=14432#comment-3880 Thanks for the explanation! Got one this week from “William Wu”.

]]>
By: Cthonus http://www.welivesecurity.com/2012/07/24/asia-domain-name-scams-still-going-strong/#comment-1039 Fri, 02 Nov 2012 16:01:32 +0000 http://blog.eset.com/?p=14432#comment-1039 Received 20 mins ago:

“(It’s very urgent, Please transfer this email to your CEO or appropriate person, thanks)

Dear Sir or Madam,
We are the department of Asian Domain Registration Service in China. I have something to confirm with you. We formally received an application on November 1, 2012 that a company which self-styled “yyyy” were applying to register “xxxxx” as their Net Brand and some domain names through our firm.
Now we are handling this registration, and after our initial checking, we found the name were similar to your company’s, so we need to check with you whether your company has authorized that company to register these names. If you authorized this, we will finish the registration at once. If you did not authorize, please let us know within 7 workdays, so that we will handle this issue better. Out of the time limit we will unconditionally finish the registration for “yyyy”.Looking forward to your prompt reply.
Best Regards,
Jim Wong
Head of Registration Department
Tel:+86-551-3434624 || Fax:+86-551-3434924
Address:No.99 JiuHuaShan Road,Hefei,Anhui,China”

Anyone have any friends in the Chinese police force? ;)

]]>