Those serial spammers are very persistent, blasting out the same idiotic email to hundreds of thousands of domains. We get at least a dozen of these emails a day!
With the subject line being “Domain Notification: – This is your Final Notice of Domain Listing” and followed by the domain name itself, those morons attempt to trick domain owners into paying fees to “list” their domains or risk having them “delisted.”
It’s a scam along the lines of “Domain Registry of America”.
The full email is below:
Attention: Important Notice
DOMAIN SERVICE NOTICE
Complete and return by fax to:
1-310-579-8660
4310 W. 190th St.
Suite # 63546
Torrance, CA 90504
United States of America
ATT: –
ADMINISTRATIVE CONTACT
–
***@***.com
– – – – – – – –
–
–
WWW.****.com
Domain Name: ****.COM
Search Engine SubmissionRequested Reply
JULY 22,2011PART I: REVIEW SOLICITATION
Attn: –
As a courtesy to domain name holders, we are sending you this notification for your business Domain name search engine registration. This letter is to inform you that it’s time to send in your registration and save.Failure to complete your Domain name search engine registration by the expiration date may result in cancellation of this offer making it difficult for your customers to locate you on the web.
Privatization allows the consumer a choice when registering. Search engine subscription includes domain name search engine submission. You are under no obligation to pay the amounts stated below unless you accept this offer. Do not discard, this notice is not an invoice it is a courtesy reminder to register your domain name search engine listing so your customers can locate you on the web.
This Notice for: WWW.****.com will expire on July 22,2011 Act today!
——————————————————————————————–DETAIL OF SERVICE: ANNUAL WEBSITE SEARCH ENGINE SUBMISSION FOR DOMAIN NAME WWW.****.com
Detail of Service: SEARCH SUBMISSIONS
Reply by Date: 07/22/2011
For Domain Name: ****.COM
Select Term Your Existing Domain Period Covered Price
****.COM
[ ] 1 year 07/22/2011 – 07/22/2012 $75.00
[ ] 2 year 07/22/2011 – 07/22/2013 $119.00
[ ] 5 year 07/22/2011 – 07/22/2016 $199.00
[ ] 10 year -Most Recommended- 07/22/2011 – 07/22/2021 $295.00
[ ] Lifetime (NEW!) Limited time offer – Best value! Lifetime $499.00
Please ensure that your contact information is correct or make the necessary changes.
Full Name: –Email: ***@***.com
Email 2: ____________________Phone: _____________________
Want to receive this notification for other domains you own? simply list them below:_____________________ __________________________________________ _____________________
Today’s Date: _____________________ Signature: _____________________Payment by Credit Card
PLEASE COMPLETE AND RETURN BY FAX: 1-310-579-8660
(Please do not include your credit card number on this form just fill the information above and fax it to us, once we receive your fax we will send you instructions on how to make a payment by credit card)****.com
——————————————————————————————–
By accepting this offer, you agree not to hold DN liable for any part. Note that THIS IS NOT A BILL. This is a solicitation. You are under no obligation to pay the amounts stated unless you accept this offer. The information in this letter contains confidential and/or legally privileged information from the notification processing department of the DN. This information is intended only for the use of the individual(s) named above. There is no pre-existing relationship between DN and the domain mentioned above. This notice is not in any part associated with a continuation of services for domain registration. Search engine submission is an optional service that you can use as a part of your website optimization and alone may not increase the traffic to your site. If you do not wish to receive further updates from DN send an email to domain_services@ymail.com and in the subject line only put remove to unsubscribe. If you are not the intended recipient, you are hereby notified that disclosure, copying, distribution or the taking of any action in reliance on the contents for this letter is strictly prohibited. * 100% satisfaction guaranteed, you may request a refund within 30 days.
I send back their own email stating that their domain is about to be dropped .
I got it too.
I sent back and tell them:
Love You Long Time…$2
I’ve been receiving about 20 of these emails a day lately. It’s a long running scam, surprised no one has shut them down yet.
Weren’t these guys sued by the AG of various states already?
Can someone please post the IP from the email headers
Jags – Sadly, I deleted those emails.
I get snail mail and email from these dicks all the time. $75 for a $7 domain renewal… Where is their website and their office? I reeeeeally want to know.
Google the header email (gwwindor@gmail.com) …
I got pinged here for quoting it…sounding a bit spammy. wtf
…anyway, now for the headers
@Jags – here are the headers (slightly modified to remove my stuff and quote the senders email…which didn’t appear when I first posted this)
Return-path: gwwindor@gmail.com
Envelope-to: SALES@xxxxxxxxxxx.COM
Delivery-date: Wed, 27 Jul 2011 04:28:20 -0500
Received: from [70.38.112.250] (helo=cl-t164-232cl.privatedns.com)
by blah.net with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from gwwindor@gmail.com)
id 1Qm0Pa-0002cV-EJ
for SALES@blah.COM; Wed, 27 Jul 2011 04:28:20 -0500
Received: from bellworl by cl-t164-232cl.privatedns.com with local (Exim 4.69)
(envelope-from gwwindor@gmail.com)
id 1Qm0PX-0000sP-Nw
for SALES@blah.COM; Wed, 27 Jul 2011 05:28:15 -0400
from cl-t164-232cl.privatedns.com (mikejulio.com [70.38.112.250] (may be forged))
Here are the details for this spammer:
registrant-firstname: Burak Sahin
registrant-lastname: Gulu
registrant-street1: 543 sokak numara 28 yaghaneler KONA
registrant-pcode: 35270
registrant-state: 35
registrant-city: Izmir
registrant-ccode: TR
registrant-phone: +90.5435625346
registrant-email: gwwindor@gmail.com
All the other details are here :
http://futurewhois.com/koredizisiistiyoruz.com.htm
Damn it. They’re back!
Hello.
Today i made a research my e-mail adress ( gwwindor (at) gmail.com) and i saw it is under the scam page.
I got many e-mails similar like yours. I don’t know why this scammers used me e-mail adress but it is not me. I am just a normal person i have also my own websites. All legit…
I think someone used my e-mail adress name (with fake e-mail method).
I see that on your page my personal name, my adress, phone number all is wroten by a user.
Believe me scammers or hackers dont give their detailed informations to their whois.
Someone used my e-mail’s name and sent spam mails to ppl.
Greetings.