Domainname Scam

YourDomain.TLD Expiration SEO

Subject: yourdomain.tld Expiration SEO
From:   Final Reminder <info@sosmd.org>
Date:   2017-10-17 15:48
To:   your@email.address
Pending Cancellation
FINAL NOTICE FOR DOMAIN
yourdomain.tld
Notice#: 375384
Date: 10/17/2017

 

 

FINAL NOTICE – Your account is pending cancellation

PURCHASE EXPIRATION DATE: 10/25/2017

DOMAIN: yourdomain.tld
EXPIRATION OFFER SEO NOTIFICATION

PLEASE CLICK ON

SECURE ONLINE PAYMENT
(link to: http://www.yourdomaintld.seossmith.win/?d=yourdomain.tld&p=11-08-2017)

TO COMPLETE YOUR PAYMENT

We have NOT received your payment yet

 

Your Name, Your Organisation
Your Address
Your City
State, Postalcode, Country

Domain Name:

Registration Period:

Price:

Term:

yourdomain.tld 11/08/2017 to 11/08/2018 $86.00 1 Year

 

SECURE ONLINE PAYMENT
(link to: http://www.yourdomaintld.seossmith.win/?d=yourdomain.tld&p=11-08-2017)

We have NOT received your payment yet

yourdomain.tld

Dear Your Name,

Failure to complete this order by 10/25/2017 . may result in the cancellation of this offer (making it difficult for your customers to locate you, using search engines on the web). We do not register or renew domain names. We sell traffic generator software.

PLEASE CLICK ON

SECURE ONLINE PAYMENT
(link to: http://www.yourdomaintld.seossmith.win/?d=yourdomain.tld&p=11-08-2017)

ACT IMMEDIATELY

 

Instructions:
You have received this message because you elected to receive special notification offers. If you no longer wish to receive our notifications, please unsubscribe here (link to: http://www.yourdomaintld.seossmith.win/unsubscribe.php) or mail written request to Domain SEO Service Registration Corp., Miami Beach, FL 33139. If you have multiple accounts with us, you must opt out for each one individually in order to stop receiving SEO notices. We are a search engine optimization company. We do not register or renew domain names. We sell traffic generator software. This message is CAN-SPAM compliant.
THIS IS NOT A BILL OR AN INVOICE. THIS IS A SEO PURCHASE OFFER. YOU ARE UNDER NO OBLIGATION TO PAY THE AMOUNT STATED UNLESS YOU ACCEPT THIS PURCHASE OFFER. This message contains promotional material strictly along the guidelines of the CAN-SPAM act of 2003. We have distinctly mentioned the source mail-id of this email and also disclosed our subject lines. They are in no way misleading. Please do not reply to this email, as we are not able to respond to messages sent to this address.

Scammer Alert

Scam alert! We have been receiving E-mail like this for years now. We’ve covered this domain scam before. The’ve changed the e-mails and websites slightly and they keep changing the urls. These e-mails are being spammed to every domain owner months before their domain expires. The subject, the heading and text suggest you must pay a.s.a.p. to prevent the domain name from expiring! If you read the small print below (and many people won’t fully understand the used technical terms) the message states that they don’t renew your domain but that this is an ‘offer’ for “SEO services” (Search Engine Optimization services) which will expire on the given dates… The links lead to a payment page (see screenshot below). So this has NOTHING to do with your domain registration!

It is very doubtful that this is a real SEO service. You most likely won’t get any service. The fact that these very misleading spam messages are been auto generated using details from the whois (domain owners) database to spam domain owners makes this “Domain SEO Service” company at least very questionable. They claim to be a company based in Miami Beach, Florida, US, but the owners of the used domains are based in China (see the owner details below). The fact that they mention following the guidelines of the CAN-SPAM act of 2003 and include an unsubscribe link at the bottom does NOT mean this wasn’t illegally spammed!

These kind of misleading ‘domain expiration’ (spam) alerts have been used by many other scammers for years now. It’s a domainname scam! Trying to trick domain owners to pay before their domain expires…

If you’ve received this by e-mail than mark it as SPAM (if possible) and/or DELETE it. You could also report all abuse contacts as described below to have them shut down their sites. Do NOT click the ‘unsubscribe’ link because this leads to a page asking for your e-mail address and they most likely spam you even more (NEVER send your e-mail address to spammers!) If you have more information about this scam comment below.


This is the landing page which will be automatically generated for your domain and expiration date:

Domain SEO Service Registration Corp. Scam
 


Domain: seossmith.win [Domainname owner]

Domain Name: seossmith.win
Registrant Name: wu zhiying
Registrant Organization: wu zhiying
Registrant Street: cuixiangjiedao635hao
Registrant City: zhuhai
Registrant State/Province: Guangdong
Registrant Postal Code: 519000
Registrant Country: CN
Registrant Phone: +86.75638971201
Registrant Fax: +86.75638971201
Registrant Email: whoisbao@126.com
Creation Date: 2017-07-13T00:22:24Z
Registry Expiry Date: 2018-07-13T00:22:24Z

Registrar: West263 International Limited
Registrar URL: west263.hk
Registrar IANA ID: 1915
Registrar Abuse Contact Email: abuse@hkdns.hk
Registrar Abuse Contact Phone: +86.2862778877
Registry Registrant ID: C4A2D5AAAFA7C4026A35C7E57AEB57E3C-NSR

Name Server: f1g1ns1.dnspod.net
Name Server: f1g1ns2.dnspod.net

 

IP-address network: 118.184.18.47 [IP-range owner]

inetnum:       118.184.0.0 - 118.184.127.255
netname:       CNISP-CN
descr:         Beijing CNISP Technology Co., Ltd.
country:       CN
organisation:  ORG-BCTC1-AP
org-name:      Beijing CNISP Technology Co., Ltd.
country:       CN
address:       Room 704, Building D, Shangdi Xinxi Road
address:       Pioneering Park, Haidian District
phone:         +86-10-82893336
fax-no:        +86-10-82893337
e-mail:        ip@cnispgroup.com
changed:       hm-changed@apnic.net 20170809
source:        APNIC

 

Website: Seossmith.win/118.184.18.47 hosting [Webhosting company]

descr:	       Shanghai Anchang Network Security Technology Co.,Ltd.
descr:         Building 4,NO.1 West Hulan Road,Shanghai,PRC
aut-num:       AS58879
as-name:       ANCHNET
country:       CN
org:           ORG-BCTC1-AP
Abuse contact: ip@cnispgroup.com
source:        APNIC

 
They sometimes use other domains (all *.win domains lately) with simelar websites. Sometimes they mask it with a bit.ly shortlink. Some other domainnames used are:
 

Domain: whoisedition.win [Domainname owner]

Domain Name: whoisedition.win [bit.ly stats]
Registrant Name: yan gang
Registrant Organization: yan gang
Registrant Street: xiang zou qu cui xiang jie dao 4029
Registrant City: ZhuHai
Registrant State/Province: GD
Registrant Postal Code: 519000
Registrant Country: CN
Registrant Phone: +86.75671016624
Registrant Fax: +86.75671016624
Registrant Email: info@serverseotv.org
Creation Date: 2017-07-09T11:54:57Z
Registry Expiry Date: 2018-07-09T11:54:57Z

Registrar: Todaynic.com, Inc.
Registrar IANA ID: 697
Registry Domain ID: D5B95BA4844FA4097AADEE351A12AD6C4-NSR

 

Domain: domacrop.win [Domainname owner]

Domain Name: domacrop.win
Registrant Name: duan wei
Registrant Organization: duan wei
Registrant Street: GuangDong ZhuHai Guang Dong Zhu Hai Shi Xiang Zhou Qu Cui Xiang
Registrant City: ZhuHai
Registrant State/Province: GuangDong
Registrant Postal Code: 150000
Registrant Country: CN
Registrant Phone: +86.15663542039
Registrant Fax: +86.15663542039
Registrant Email: info@globalserverseo.org
Creation Date: 2017-07-13T01:00:54Z
Registry Expiry Date: 2018-07-13T01:00:54Z

Registrar: West263 International Limited
Registrar IANA ID: 1915
Registrar URL: west263.hk
Registrar Abuse Contact Email: abuse@hkdns.hk
Registrar Abuse Contact Phone: +86.2862778877
Registry Registrant ID: CF227F45F6B9747ADA214918F47E4D1A5-NSR

 

Domain: seosparty.win [Domainname owner]

Domain Name: seosparty.win [bit.ly stats]
Registrant Name: ye jie
Registrant Organization: ye jie
Registrant Street: cuixiangjiedao7843
Registrant City: ZhuHai
Registrant State/Province: GD
Registrant Postal Code: 519000
Registrant Country: CN
Registrant Phone: +86.75673273806
Registrant Fax: +86.75673273806
Registrant Email: info@superserverseo.org
Creation Date: 2017-07-13T01:24:04Z
Registry Expiry Date: 2018-07-13T01:24:04Z

Registrar: Todaynic.com, Inc.
Registrar IANA ID: 697
Registrar URL: www.todaynic.biz
Registry Registrant ID: C8CFE7F9C0B2A47E38F0BEC73C785E008-NSR

 

Domain: domaorbit.win [Domainname owner]

Domain Name: domaorbit.win [bit.ly stats]
Registrant Name: li lixin
Registrant Organization: li lixin
Registrant Street: GuangDong ZhuHai Guang Dong Zhu Hai Shi Xiang Zhou Qu Cui Xiang
Registrant City: ZhuHai
Registrant State/Province: GuangDong
Registrant Postal Code: 553000
Registrant Country: CN
Registrant Phone: +86.15718687535
Registrant Fax: +86.15718687535
Registrant Email: info@onlineserverseo.org
Creation Date: 2017-07-13T00:48:15Z
Registry Expiry Date: 2018-07-13T00:48:15Z

Registrar: West263 International Limited
Registrar IANA ID: 1915
Registrar Abuse Contact Email: abuse@hkdns.hk
Registrar Abuse Contact Phone: +86.2862778877
Registry Registrant ID: C383FDF37FDBF4109938F57C3399C9FF2-NSR

 

Other used domains for this scam:

(You can check domain owner details etc. through whois.nic.win)

autoserviceseo.org
boomerdomains.org
computercricket.win
computericus.win
domaboat.win [Stats]
domacable.win
domadrive.win
domainabuse.win
domainapparel.win
domaferry.win
domagraph.win
domaify.win [Stats]
domainadd.win
domainattack.win
domainball.win
domainblank.win
domainsload.win
domainsvant.win [Stats]
domaintary.win
domamogul.win
domaskiff.win
casualbuilder.org
computermite.win
ecoserviceseo.org
freeserviceseo.org [Stats]
goserviceseo.org [Stats]
loveserviceseo.org
mobileserviceseo.org [Stats]
myserviceseo.org
newserviceseo.org
onlineserviceseo.org
seopublicaddreviews.org
seosarray.win [Stats]
seocheckactivity.win [Stats]
seocheckafrica.win
seocheckamerica.win
seocheckanswer.win
seocheckapr.win [Stats]
seocheckarchives.win
seocheckblog.win
seocheckblood.win
seocheckbritish.win [Stats]
seocheckbrowse.win [Stats]
seocheckbuilding.win
seocheckca.win [Stats]
seocheckcatalog.win
seocheckchange.win
seocheckcurrent.win
seocheckdistance.win
seocheckdouble.win
seocheckdrug.win
seocheckequipment.win
seocheckleft.win
seochecklife.win [Stats]
seocheckloan.win
seochecklot.win [Stats]
seochecklower.win
seocheckma.win [Stats]
seocheckmanufacturer.win
seocheckmark.win [Stats]
seocheckmaterial.win
seoeronline.win [Stats]
seoerrealestate.win
seoersearch.win
seoertrade.win
seoerweather.win
seofashion.win
seomortgage.win
seomovie.win
seosate.win
seosclub.win
seoscricket.win
seosfish.win [Stats]
seosgaggle.win
seosharbor.win
seoshound.win
seosizber.win
seosmancer.win [Stats]
seosmate.win [Stats]
seosmite.win [Stats]
seosnic.win
seosrigger.win
seosstream.win
seostary.win
seosture.win
seoswave.win
seosyo.win
servicesdomshoster.org
serviceseoapp.org
serviceseobook.org [Stats]
serviceseoclub.org
serviceseoco.org
serviceseogroup.org
serviceseonetwork.org
serviceseopress.org
serviceseoservice.org
serviceseosite.org
serviceseostore.org
serviceseoworld.org
techserviceseo.org
termineseo.org [Stats]
theserviceseo.org
travelserviceseo.org [Stats]
unisanyall.org
whoisaboveage.top
whoisblab.win [Stats]
whoisinshopping.win
whoisinstock.win
whoisthiaddress.win
whoisthiat.win
whoisthibasis.win
whoisthiboy.win
whoisininfo.win
whoisinnet.win
worldserviceseo.org
yourcompletedorder.party

Post Author: Webmaster

4 thoughts on “YourDomain.TLD Expiration SEO

  • Debbie

    (May 21, 2018 - 4:13 am)

    I got a similar email today from a different address.

    Domain Name: whoisaboveart.top
    Registry Domain ID: D20180511G10001G_54507346-top
    Registry Registrant ID: C20180511C_29949850-top
    Registrant Name: sara bell
    Registrant Street: xiang zou qu cui xiang jie dao 3101
    Registrant City: zhu hai
    Registrant State/Province: Guangdong
    Registrant Postal Code: 519000
    Registrant Country: CN
    Registrant Phone: +86.075644693172
    Registrant Email: sarabell0514@mail.com
    Registry Admin ID: C20180511C_29949850-top
    Name Server: f1g1ns2.dnspod.net
    Name Server: f1g1ns1.dnspod.net

    This redirects to point-and-click.org, identical to the site for reconnect24.org, supposedly a hosting company in Los Angeles called “Always Online” where the whoisaboveage.top site went.

    Domain Name: POINT-AND-CLICK.ORG
    Registry Registrant ID: C205809466-LROR
    Registrant Name: zhuang
    Registrant Organization: zhuang xiao ming
    Registrant Street: xiang zou qu cui xiang jie dao 4296
    Registrant City: ZhuHai
    Registrant State/Province: GD
    Registrant Postal Code: 519000
    Registrant Country: CN
    Registrant Phone: +86.75627790083
    Registrant Fax: +86.75627790083
    Registrant Email: ivywashington410@mail.com
    Registry Admin ID: C205809466-LROR
    Name Server: F1G1NS1.DNSPOD.NET
    Name Server: F1G1NS2.DNSPOD.NET

    Now I don’t think Always Online even exists as a business, but is just another way to scam people out of their money. Question: Does anyone in China even care when we report abuse?

      Webmaster

      (May 24, 2018 - 10:39 am)

      Yeah we don’t know if anybody really is going to do anything with these abuse reports. Sometimes we get a reply with taken actions (yeah!), other times (more often) we hear nothing back. But.. it’s not too much trouble to send an abuse report so why not try!

  • Debbie

    (May 16, 2018 - 5:56 am)

    I got this message today and was about to reply and tell them to take a hike. Then I found this site.
    The sender’s address reads {info@orafi.org} in Italy. Likely forged.

    The links in the message go to whoisaboveage.top.
    Domain Name: whoisaboveage.top
    Registrant Name: polly flores
    Registrant Street: xiang zou qu cui xiang jie dao 5005
    Registrant City: zhu hai
    Registrant State/Province: Guangdong
    Registrant Postal Code: 519000
    Registrant Country: CN
    Registrant Phone: +86.13230494956
    Registrant Email: {pollyflores0606@mail.com}
    Registry Admin ID: C20180510C_29888986-top
    Name Server: f1g1ns2.dnspod.net
    Name Server: f1g1ns1.dnspod.net

    I tried to go to whoisaboveage.top just to see what was there, but it redirected to reconnect24.org which appears to be a hosting provider in Los Angeles. CA. I don’t know if someone is on to them, or it is just my browser trying to protect me from the evil scammers.

      Webmaster

      (May 17, 2018 - 10:25 am)

      Hello Debbie, yes that’s the same scammer indeed. No use in replying to them. It’s probably better if everybody that got their spam mail sent a complaint on the abuse accounts of the registar and registry. The domain whoisaboveage.top has ip-address 103.200.29.26 and is hosted at Cloudie Limited (registrar AS55933) in Hong Kong, China. http://client.cloudie.hk/ Abuse contact:admin@cloudie.hk The dotTop registry is http://www.nic.top/en/ (based in Yuhuatai District, Nanjing, China), abuse contact:abuse@nic.top

      Oh and the domain whoisaboveage.top does a redirect to http://reconnect24.org/ indeed (HTTP 301 Moved Permanently) so this is not your browser protecting you.

      So keep ignoring these spam emails and forward them to abuse-accounts with a complaint whereever you can. Good luck!

Leave a Reply

Your email address will not be published. Required fields are marked *