| Subject: | yourdomain.tld Expiration SEO |
| From: | Final Reminder <info@sosmd.org> |
| Date: | 2017-10-17 15:48 |
| To: | your@email.address |
|
Scam alert! We have been receiving E-mail like this for years now. We’ve covered this domain scam before. The’ve changed the e-mails and websites slightly and they keep changing the urls. These e-mails are being spammed to every domain owner months before their domain expires. The subject, the heading and text suggest you must pay a.s.a.p. to prevent the domain name from expiring! If you read the small print below (and many people won’t fully understand the used technical terms) the message states that they don’t renew your domain but that this is an ‘offer’ for “SEO services” (Search Engine Optimization services) which will expire on the given dates… The links lead to a payment page (see screenshot below). So this has NOTHING to do with your domain registration!
It is very doubtful that this is a real SEO service. You most likely won’t get any service. The fact that these very misleading spam messages are been auto generated using details from the whois (domain owners) database to spam domain owners makes this “Domain SEO Service” company at least very questionable. They claim to be a company based in Miami Beach, Florida, US, but the owners of the used domains are based in China (see the owner details below). The fact that they mention following the guidelines of the CAN-SPAM act of 2003 and include an unsubscribe link at the bottom does NOT mean this wasn’t illegally spammed!
These kind of misleading ‘domain expiration’ (spam) alerts have been used by many other scammers for years now. It’s a domainname scam! Trying to trick domain owners to pay before their domain expires…
If you’ve received this by e-mail than mark it as SPAM (if possible) and/or DELETE it. You could also report all abuse contacts as described below to have them shut down their sites. Do NOT click the ‘unsubscribe’ link because this leads to a page asking for your e-mail address and they most likely spam you even more (NEVER send your e-mail address to spammers!) If you have more information about this scam comment below.
This is the landing page which will be automatically generated for your domain and expiration date:
Domain: seossmith.win [Domainname owner]
Domain Name: seossmith.win Registrant Name: wu zhiying Registrant Organization: wu zhiying Registrant Street: cuixiangjiedao635hao Registrant City: zhuhai Registrant State/Province: Guangdong Registrant Postal Code: 519000 Registrant Country: CN Registrant Phone: +86.75638971201 Registrant Fax: +86.75638971201 Registrant Email: whoisbao@126.com Creation Date: 2017-07-13T00:22:24Z Registry Expiry Date: 2018-07-13T00:22:24Z Registrar: West263 International Limited Registrar URL: west263.hk Registrar IANA ID: 1915 Registrar Abuse Contact Email: abuse@hkdns.hk Registrar Abuse Contact Phone: +86.2862778877 Registry Registrant ID: C4A2D5AAAFA7C4026A35C7E57AEB57E3C-NSR Name Server: f1g1ns1.dnspod.net Name Server: f1g1ns2.dnspod.net
IP-address network: 118.184.18.47 [IP-range owner]
inetnum: 118.184.0.0 - 118.184.127.255 netname: CNISP-CN descr: Beijing CNISP Technology Co., Ltd. country: CN organisation: ORG-BCTC1-AP org-name: Beijing CNISP Technology Co., Ltd. country: CN address: Room 704, Building D, Shangdi Xinxi Road address: Pioneering Park, Haidian District phone: +86-10-82893336 fax-no: +86-10-82893337 e-mail: ip@cnispgroup.com changed: hm-changed@apnic.net 20170809 source: APNIC
Website: Seossmith.win/118.184.18.47 hosting [Webhosting company]
descr: Shanghai Anchang Network Security Technology Co.,Ltd. descr: Building 4,NO.1 West Hulan Road,Shanghai,PRC aut-num: AS58879 as-name: ANCHNET country: CN org: ORG-BCTC1-AP Abuse contact: ip@cnispgroup.com source: APNIC
They sometimes use other domains (all *.win domains lately) with simelar websites. Sometimes they mask it with a bit.ly shortlink. Some other domainnames used are:
Domain: whoisedition.win [Domainname owner]
Domain Name: whoisedition.win [bit.ly stats] Registrant Name: yan gang Registrant Organization: yan gang Registrant Street: xiang zou qu cui xiang jie dao 4029 Registrant City: ZhuHai Registrant State/Province: GD Registrant Postal Code: 519000 Registrant Country: CN Registrant Phone: +86.75671016624 Registrant Fax: +86.75671016624 Registrant Email: info@serverseotv.org Creation Date: 2017-07-09T11:54:57Z Registry Expiry Date: 2018-07-09T11:54:57Z Registrar: Todaynic.com, Inc. Registrar IANA ID: 697 Registry Domain ID: D5B95BA4844FA4097AADEE351A12AD6C4-NSR
Domain: domacrop.win [Domainname owner]
Domain Name: domacrop.win Registrant Name: duan wei Registrant Organization: duan wei Registrant Street: GuangDong ZhuHai Guang Dong Zhu Hai Shi Xiang Zhou Qu Cui Xiang Registrant City: ZhuHai Registrant State/Province: GuangDong Registrant Postal Code: 150000 Registrant Country: CN Registrant Phone: +86.15663542039 Registrant Fax: +86.15663542039 Registrant Email: info@globalserverseo.org Creation Date: 2017-07-13T01:00:54Z Registry Expiry Date: 2018-07-13T01:00:54Z Registrar: West263 International Limited Registrar IANA ID: 1915 Registrar URL: west263.hk Registrar Abuse Contact Email: abuse@hkdns.hk Registrar Abuse Contact Phone: +86.2862778877 Registry Registrant ID: CF227F45F6B9747ADA214918F47E4D1A5-NSR
Domain: seosparty.win [Domainname owner]
Domain Name: seosparty.win [bit.ly stats] Registrant Name: ye jie Registrant Organization: ye jie Registrant Street: cuixiangjiedao7843 Registrant City: ZhuHai Registrant State/Province: GD Registrant Postal Code: 519000 Registrant Country: CN Registrant Phone: +86.75673273806 Registrant Fax: +86.75673273806 Registrant Email: info@superserverseo.org Creation Date: 2017-07-13T01:24:04Z Registry Expiry Date: 2018-07-13T01:24:04Z Registrar: Todaynic.com, Inc. Registrar IANA ID: 697 Registrar URL: www.todaynic.biz Registry Registrant ID: C8CFE7F9C0B2A47E38F0BEC73C785E008-NSR
Domain: domaorbit.win [Domainname owner]
Domain Name: domaorbit.win [bit.ly stats] Registrant Name: li lixin Registrant Organization: li lixin Registrant Street: GuangDong ZhuHai Guang Dong Zhu Hai Shi Xiang Zhou Qu Cui Xiang Registrant City: ZhuHai Registrant State/Province: GuangDong Registrant Postal Code: 553000 Registrant Country: CN Registrant Phone: +86.15718687535 Registrant Fax: +86.15718687535 Registrant Email: info@onlineserverseo.org Creation Date: 2017-07-13T00:48:15Z Registry Expiry Date: 2018-07-13T00:48:15Z Registrar: West263 International Limited Registrar IANA ID: 1915 Registrar Abuse Contact Email: abuse@hkdns.hk Registrar Abuse Contact Phone: +86.2862778877 Registry Registrant ID: C383FDF37FDBF4109938F57C3399C9FF2-NSR
Other used domains for this scam:
(You can check domain owner details etc. through whois.nic.win)
autoserviceseo.org boomerdomains.org computercricket.win computericus.win domaboat.win [Stats] domacable.win domadrive.win domainabuse.win domainapparel.win domaferry.win domagraph.win domaify.win [Stats] domainadd.win domainattack.win domainball.win domainblank.win domainsload.win domainsvant.win [Stats] domaintary.win domamogul.win domaskiff.win casualbuilder.org computermite.win ecoserviceseo.org freeserviceseo.org [Stats] goserviceseo.org [Stats] loveserviceseo.org mobileserviceseo.org [Stats] myserviceseo.org newserviceseo.org onlineserviceseo.org seopublicaddreviews.org seosarray.win [Stats] seocheckactivity.win [Stats] seocheckafrica.win seocheckamerica.win seocheckanswer.win seocheckapr.win [Stats] seocheckarchives.win seocheckblog.win seocheckblood.win seocheckbritish.win [Stats] seocheckbrowse.win [Stats] seocheckbuilding.win seocheckca.win [Stats] seocheckcatalog.win seocheckchange.win seocheckcurrent.win seocheckdistance.win seocheckdouble.win seocheckdrug.win seocheckequipment.win seocheckleft.win seochecklife.win [Stats] seocheckloan.win seochecklot.win [Stats] seochecklower.win seocheckma.win [Stats] seocheckmanufacturer.win seocheckmark.win [Stats] seocheckmaterial.win seoeronline.win [Stats] seoerrealestate.win seoersearch.win seoertrade.win seoerweather.win seofashion.win seomortgage.win seomovie.win seosate.win seosclub.win seoscricket.win seosfish.win [Stats] seosgaggle.win seosharbor.win seoshound.win seosizber.win seosmancer.win [Stats] seosmate.win [Stats] seosmite.win [Stats] seosnic.win seosrigger.win seosstream.win seostary.win seosture.win seoswave.win seosyo.win servicesdomshoster.org serviceseoapp.org serviceseobook.org [Stats] serviceseoclub.org serviceseoco.org serviceseogroup.org serviceseonetwork.org serviceseopress.org serviceseoservice.org serviceseosite.org serviceseostore.org serviceseoworld.org techserviceseo.org termineseo.org [Stats] theserviceseo.org travelserviceseo.org [Stats] unisanyall.org whoisaboveage.top whoisblab.win [Stats] whoisinshopping.win whoisinstock.win whoisthiaddress.win whoisthiat.win whoisthibasis.win whoisthiboy.win whoisininfo.win whoisinnet.win worldserviceseo.org yourcompletedorder.party
4 thoughts on “YourDomain.TLD Expiration SEO”
Debbie
(May 21, 2018 - 4:13 am)I got a similar email today from a different address.
Domain Name: whoisaboveart.top
Registry Domain ID: D20180511G10001G_54507346-top
Registry Registrant ID: C20180511C_29949850-top
Registrant Name: sara bell
Registrant Street: xiang zou qu cui xiang jie dao 3101
Registrant City: zhu hai
Registrant State/Province: Guangdong
Registrant Postal Code: 519000
Registrant Country: CN
Registrant Phone: +86.075644693172
Registrant Email: sarabell0514@mail.com
Registry Admin ID: C20180511C_29949850-top
Name Server: f1g1ns2.dnspod.net
Name Server: f1g1ns1.dnspod.net
This redirects to point-and-click.org, identical to the site for reconnect24.org, supposedly a hosting company in Los Angeles called “Always Online” where the whoisaboveage.top site went.
Domain Name: POINT-AND-CLICK.ORG
Registry Registrant ID: C205809466-LROR
Registrant Name: zhuang
Registrant Organization: zhuang xiao ming
Registrant Street: xiang zou qu cui xiang jie dao 4296
Registrant City: ZhuHai
Registrant State/Province: GD
Registrant Postal Code: 519000
Registrant Country: CN
Registrant Phone: +86.75627790083
Registrant Fax: +86.75627790083
Registrant Email: ivywashington410@mail.com
Registry Admin ID: C205809466-LROR
Name Server: F1G1NS1.DNSPOD.NET
Name Server: F1G1NS2.DNSPOD.NET
Now I don’t think Always Online even exists as a business, but is just another way to scam people out of their money. Question: Does anyone in China even care when we report abuse?
Webmaster
(May 24, 2018 - 10:39 am)Yeah we don’t know if anybody really is going to do anything with these abuse reports. Sometimes we get a reply with taken actions (yeah!), other times (more often) we hear nothing back. But.. it’s not too much trouble to send an abuse report so why not try!
Debbie
(May 16, 2018 - 5:56 am)I got this message today and was about to reply and tell them to take a hike. Then I found this site.
The sender’s address reads {info@orafi.org} in Italy. Likely forged.
The links in the message go to whoisaboveage.top.
Domain Name: whoisaboveage.top
Registrant Name: polly flores
Registrant Street: xiang zou qu cui xiang jie dao 5005
Registrant City: zhu hai
Registrant State/Province: Guangdong
Registrant Postal Code: 519000
Registrant Country: CN
Registrant Phone: +86.13230494956
Registrant Email: {pollyflores0606@mail.com}
Registry Admin ID: C20180510C_29888986-top
Name Server: f1g1ns2.dnspod.net
Name Server: f1g1ns1.dnspod.net
I tried to go to whoisaboveage.top just to see what was there, but it redirected to reconnect24.org which appears to be a hosting provider in Los Angeles. CA. I don’t know if someone is on to them, or it is just my browser trying to protect me from the evil scammers.
Webmaster
(May 17, 2018 - 10:25 am)Hello Debbie, yes that’s the same scammer indeed. No use in replying to them. It’s probably better if everybody that got their spam mail sent a complaint on the abuse accounts of the registar and registry. The domain whoisaboveage.top has ip-address 103.200.29.26 and is hosted at Cloudie Limited (registrar AS55933) in Hong Kong, China. http://client.cloudie.hk/ Abuse contact:admin@cloudie.hk The dotTop registry is http://www.nic.top/en/ (based in Yuhuatai District, Nanjing, China), abuse contact:abuse@nic.top
Oh and the domain whoisaboveage.top does a redirect to http://reconnect24.org/ indeed (HTTP 301 Moved Permanently) so this is not your browser protecting you.
So keep ignoring these spam emails and forward them to abuse-accounts with a complaint whereever you can. Good luck!