walter@dciint.com.cn DCI Data Interconnect Ltd

[Big Al]

Domain registration scam

Dear Manager,
This is a confirmation letter regarding registration of your company name
, please read it carefully.
We are an agency engaging in registering brand name and domain names. Today, Our
center received an application from True Sigh International Ltd and they apply to
register as their brand name and some top-level domain names(.CN .HK
etc). We found the main body of domain names is same as your company name. I am not
sure about the relationship between you and them. Please tell me whether or not your
company authorizes them to register names.
We are dealing with the application and we need to confirm whether you have
authorized them? If you don't authorize them, please reply me an e-mail. Looking
forward to your reply.
Best regards,
Walter Lee
Tel:0086-551 634 911 91
Fax:0086-551 634 911 92
Address:Huajin Building, No.121, Huaihe Road, Hefei, Anhui

Header:

Return-Path: <walter@dciint.com.cn>
Mon, 24 Oct 2016
Received: from walterpc (unknown [36.5.231.163])
From: "Walter Lee"<walter@dciint.com.cn>
Subject:

Header Analysis Quick Report<br>Originating IP: 36.5.231.163<br>Originating ISP: Chinanet<br> City: Hefei<br>Country of Origin: China<br>* For a complete report on this email header goto ipTRACKERonline

Whois:
Domain Name: dciint.com.cn
ROID: 20160727s10011s86873042-cn
Domain Status: clientTransferProhibited
Registrant ID: p45190353
Registrant: 程许
Registrant Contact Email: info@dcidata.org.cn
Sponsoring Registrar: 广东时代互联科技有限公司
Name Server: ns5010.01isp.com
Name Server: ns5011.01isp.net
Registration Time: 2016-07-27 18:04:12
Expiration Time: 2017-07-27 18:04:12
DNSSEC: unsigned

What the Website looks like:

Contact page:

Text from the contact page:
Contacting DCI Data Interconnect Ltd
Our friendly Support Team is available to help you 24 hours a day, seven days a week. We look forward to hearing from you!

Online
Sales and Service Inquiries
Have a question about a service? Fill out this form, and our Support Team will get back to you.

Feedback and Suggestions
How are we doing? Fill out this form with your advice and ideas. We value every opinion, so keep them coming!

Telephone
Tel:0086-551 634 911 91
Fax:0086-551 634 911 92
Address:Huajin Building, No.121, Huaihe Road, Hefei, Anhui

Telephone
+8655163491191
Number billable as geographic number
Country or destination China
City or exchange location Hefei, AH

+8655163491192
Number billable as geographic number
Country or destination China
City or exchange location Hefei, AH

[Big Al]

Dear CEO or General Manager,
This is a letter to confirm the registration of your company name scamsurvivors,
please read it carefully. We are an agency engaging in registering brand name and
domain names. Today, our center received an application from CPLT International Ltd
applying to register scamsurvivors as their brand name and some top-level domain
names(.CN .HK etc). After our careful investigation, We found the main body of
domain names is same as yours. As a professional registrar, We are obligated to
inform you of this situation.
We are handling the application and we need to confirm whether or not you authorize
them to register them? Let me know your answer ASAP so as to solve this promptly.
Thanks for your cooperation.

Best Regards,
Bruce Lee
Tel:0086.(0)551.63491 193
Fax:0086.(0)551.63491 192
No.2 Building,Wanda Square,WuHu Road,Hefei China

Header:

Return-Path: <BL@iqcs-sa.cn>
Delivered-To:
Return-path: <BL@iqcs-sa.cn>
Envelope-to:
Delivery-date: Mon, 01 May 2017
Received: from mta11.east.net ([211.100.47.51]:35127)
by xxx
(envelope-from <BL@iqcs-sa.cn>)
id 1d55jN-00045E-1J
for ; Mon, 01 May 2017
Received: from smtp5x01.east.net (unknown [211.100.47.38])
by mta11.east.net (Postfix) with ESMTP id 7EB981A5966
for < >; Mon, 1 May 2017
Received: from blpc (unknown [60.172.121.146])
by smtp5x01.east.net (Postfix) with ESMTPA id 5962160043
for <b >; Mon, 1 May 2017
From: "Bruce Lee"<BL@iqcs-sa.cn>
To:
Subject:
Date: Mon, 1 May 2017
Message-Id: <DM__170501094854_78013538458@s.iqcs-sa.cn>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_17050109494616868477621_002"
X-Priority: 1
X-Mailer: DreamMail 4.6.9.2
X-FangMail-Miltered: at localhost.localdomain with ID 5906E307.003 by FangMail milter!
X-FangMail-Envelope: 1493623559/5962160043/5906E307.003/60.172.121.146/[60.172.121.146]/blpc/<BL@iqcs-sa.cn>
X-FangMail-Bounce-Flag: 1493623559.5906E307.003
X-FangMail-Outinfo: 1493623559/5906E307.003/5962160043/bl@iqcs-sa.cn/1
X-Spam-Status: No, score=1.0
X-Spam-Score: 10
X-Spam-Bar: +

Phone:
+8655163491193
Number billable as geographic number
Country or destination China
City or exchange location Hefei, AH

[firefly]

According to https://www.netregistry.com.au/support/ ... perty-ema/ :

Updated Notice: 27th August 2013

This particular scam has been going for at least 5 years now. If you Google '.cn domain registration scams' you'll find articles back to at least 2008.

ICANN are aware of it, although appear to have zero interest in actually proactively and positively addressing the situation.

It would seem at the least they could demand the deletion of the domain name behind the scam. This would effectively take their bogus websites off the Internet. In the unlikely event the scam is originating from an accredited Registrar they could be sanctioned, up to and including having their access to the Registry limited or cut. However, ICANN is simply doing what it does best, which is nothing remotely of value to anyone.

A slightly new twist has occurred on this scam over the past few weeks is that the 'Registrar' is now identifying themselves as "www.netregistry.org.cn" and have blatantly and knowingly ripped off our logo and trademark material. They are doing this to pass themselves off as being related to Netregistry in some way and to create confusion to recipients of their scam.

We advise all clients to ignore any emails from "netregistry.org.cn" and to actively delete them as they are a scam, they are not related in any way, shape or form to us, and are blatantly ripping us and Australian domain owners off.

Unfortunately as they are based in China, enforcing any kind of action to protect our rights, is simply impossible.

They also trade under a number of other grandiose names, claiming to hold various ICANN registrar accreditations. Naturally upon any search of accredited ICANN Registrars none of these entities nor their parent entity can be found.

chinaregistry.org

netregistry.org.cn

cnregistry.org

yiguannetwork.com

yigudns.com

Parent entity: Yi Guan Information Technology Company Limited (Shanghai)

All of these entities are scammers, who if you pay any sum of money will never fulfill any agreement you enter into with them. They simply disappear to trade as a new company/website address and begin fresh.

Originally posted December 2011:

Registrants of domain names should be aware of an ongoing Domain Name Dispute Scam coming from what appears as a "Registrar" in China.

In this scam, a registrant of any .com or a .net domain name is notified of "some company" who applied for the domain equivalents in Chinese and other Asia related domain TLDs, and the registrant is urged to secure their intellectual property on the web by registering those domain names immediately at their "registrar in China".

The registrants contact email address details are copied from Whois and in some cases also copied from the immediate websites associated with the domain names in question.

This is a scam because the claim is false and nobody actually applied for the domains in question. Registrants should merely ignore such emails as spam. However if the registrant wishes to truly secure those domains in the Chinese and other Asia based TLDs, the registrant is welcome to find a reputable Chinese registrar and complete their online branding portfolios.