CyberInsecure.com

Daily cyber threats and internet security news: network security, online safety and latest security alerts
January 11th, 2011

Chinese Scammers Act As Registrars, Blackmail Domain Name Owners

Domain name scammers are once again targeting domain name owners in an attempt to generate some easy income by an unsophisticated blackmail.

Typically, the scam starts with an email to domain owners warning them about a foreign company that is trying to purchase websites using your domain and trademark names. However being the responsible and caring Domain Name Registration Service they are, they are first contacting you, the owner of the existing domains and, possibly, trademarks, and will give you the amazing opportunity to get these website names first and therefore protect your brand.

Here is one example of such scam email:

from Fnew Law
reply-to fnew-law@chinesenic.net
subject Concerning ” domainname ” Brand Name dispute

(If you are not the person who is in charge of this, please forward to the right person/ department, as this is urgent, thank you.)
Dear CEO,
We are the department of registration service in China. we have something which needs to confirm with you. We formally received an application on Jan.10th 2011. One company called “TSMI Research & Development Corp” is applying to register ” domainname ” as Brand name and domain names as below:

domainname.asia
domainname.cn
domainname.cn
domainname.com.hk
domainname.com.tw
domainname.hk
domainname.in
domainname.tw

After our initial checking, we found the Brand name and domain names being applied are as same as your company! So we need confirmation with your company. If the aforementioned company is your business partner or your subsidiary, please DO NOT reply us, we will approve the application automatically. If you don’t have any relationship with this company, please contact us within 7 workdays. If over the deadline, we will approve the application submitted by “TSMI Research & Development Corp” unconditionally.

Best Regards

David Ho

Senior Consultant

Domain WHOIS about chinesenic.net shows the following:

Registrant Contact:
Shanghai Fengwang Wangluo youxian gongsi
He Ping Wei asiadomain@live.cn
+86.2137529318 fax: +86.2137529316
No.258.North Yunhe Road Fengxian
shanghai Shanghai 201400
cn

DNS:
ns1.4everdns.com
ns2.4everdns.com

Created: 2011-01-04
Expires: 2012-01-04

A reputable “department of registration service” with a live.cn free webmail contact and a domain registered few days ago. Replying to such emails might not only make scammers send you bills and payment demands, but also encourage them and target you in the future, possibly in more sophisticated scams and blackmail attempts.

As you can see from an older list at Firetrust, the scammers got plenty of domains, which might indicate the fact this business brings certain income:

http://www.anwins.com

http://www.asiaao.cn

http://www.asiadm.org

http://www.asiadnr.hk.cn

http://www.asiadnr.net

http://www.asiadnr.org

http://www.asiaip.org

http://www.asianetwork.ws

http://www.asianetworkonline.com

http://www.asiaregistrar.org

http://www.beijing-anwins.com.cn

http://www.bj-hk.asia

http://www.bj-hkzc.com.cn

http://www.bjhknet.cn

http://www.china-domainsolution.org.cn

http://www.china-net.hk.cn

http://www.china-net.hk

http://www.chinasps.net.cn

http://www.chinasps.org.cn

http://www.chooke.com.cn

http://www.chuk.com.cn

http://www.cnbcgov.org.cn

http://www.cntl.hk.cn

http://www.dnrnic.net

http://www.domainaudit.org.cn

http://www.domaininasia.com

http://www.domaininasia.org

http://www.erimut.com

http://www.europaregistry.net.cn

http://www.europaregistry.org

http://www.europatech.com.cn

http://www.europetech.com.cn

http://www.fexon.hk

http://www.firetrust.org.cn

http://www.govisp.cn

http://www.ha-zd.com.cn

http://www.ha-zd.com

http://www.ha-zd.org

http://www.hkstareast.com

http://www.hkstareast.net

http://www.idci.org.cn

http://www.inveis.com.cn

http://www.inveis.com

http://www.inwis.cn

http://www.netinasia.com

http://www.netinchina.hk

http://www.shanghainic.org.cn

http://www.shnetnic.cn

http://www.shundajishu.com.cn

http://www.shundajishu.net.cn

http://www.shundakeji.net

http://www.star-east.hk

http://www.ujane.cn

http://www.ujanegroup.cn

http://www.westtechnology.asia

http://www.worldregistry.com.cn

http://www.ytym.org

http://www.101688.cn

http://www.35nic.net

http://www.8ii.com.cn

http://www.aisiji.com.cn

http://www.anble.com

http://www.anwis.cn

http://www.asiaao.com

http://www.bj-hk.org.cn

http://www.branddomain.cn

http://www.cannic.net

http://www.cetx.com.cn

http://www.china-inter.net

http://www.china-reg.com.cn

http://www.chinahuyi.net

http://www.chinakj.cn

http://www.chinaprince.cn

http://www.chinawwl.net

http://www.cn35.cn

http://www.cnirc.hk

http://www.cnnetcom.org.cn

http://www.cnnzc.com.cn

http://www.easythink.cn

http://www.enwis.cn

http://www.gomerit.com.cn

http://www.govnic.org.cn

http://www.govzg.cn

http://www.gxisc.cn

http://www.huibai.cn

http://www.huitom.com

http://www.idcasia.net

http://www.idcno1.com

http://www.inipr.cn

http://www.ispgov.cn

http://www.jsccn.cn

http://www.lailiisp.com.cn

http://www.longyu.org.cn

http://www.lwcom.net

http://www.me114.cn

http://www.mergov.cn

http://www.mtell.cn

http://www.net-chinese.net

http://www.nethw.com

http://www.netinchina.org.cn

http://www.netzqt.cn

http://www.nianbang.com

http://www.nicgov.cn

http://www.onvis.com.cn

http://www.shanghainetnic.org.cn

http://www.singco.net

http://www.sqok.cn

http://www.squil.cn

http://www.squil.com.cn

http://www.tian-zi.com

http://www.virtualoffice.org.cn

http://www.weo.com.cn

http://www.wlochina.com

http://www.wvon.com.cn

http://www.xanadu.net.cn

http://www.xing-guo.org.cn

http://www.xingwan.net

http://www.xm-ls.com

http://www.xmeso.com

http://www.xmgoogle.cn

http://www.xmhongyi.cn

http://www.xmhuao.cn

http://www.xmmingyi.com

http://www.xmql.cn

http://www.xmwuji.net

http://www.xmym.cn

http://www.xmzd.com.cn

http://www.xmzql.cn

http://www.xmzqt.com

http://www.xunbai.net

http://www.yi100.com.cn

http://www.yunkao.cn

http://www.zgwx.cc

http://www.zgxmmw.com

http://www.zgxmxh.cn

http://www.zhonghu.net.cn

http://www.zitech.org.cn

http://www.zstgov.cn

http://www.zwnic.cn

http://www.zwwcn.com

http://www.zxnet.net.cn

http://www.zytnet.cn

Share this item with others:

More on CyberInsecure:
  • Spammers Domain Registrar EstDomains Receives ICANN Deactivation Notice
  • Scammers Attempt To Trick Companies, Pose As Domain Registrar Employees
  • More Websites Are Compromised, This Time Avoiding Chinese Websites And Users
  • Google Bangladesh Google.com.bd DNS Hijacked, Redirects Visitors For A Limited Time
  • Hackers And Scammers Continue Exploit China Earthquake

  • If you found this information useful, consider linking to it from your own website.
    Just copy and paste the code below into your website (Ctrl+C to copy)
    It will look like this: Chinese Scammers Act As Registrars, Blackmail Domain Name Owners

    Leave a Reply

    Comments with unsolicited links to other resources will be marked as spam. DO NOT leave links in comments. Please leave your real email, it wont be published.

    *
    To prove you're a person (not a spam script), type the security word shown in the picture. Click on the picture to hear an audio file of the word.
    Click to hear an audio file of the anti-spam word