chinaregistry.org.cn chinaregistry-sx.org

[Big Al]

Another Suicide Scammer. I've replied to the second website addy. Let's see if he's paying attention....

(Please forward this to your CEO, because this is urgent. Thanks)

We are the domain name registration service company in China. On Sep 4, 2017, we
received an application from Jiatai Ltd requested "scamsurvivors" as their internet
keyword and China (CN) domain names (scamsurvivors.cn, scamsurvivors.com.cn,
scamsurvivors.net.cn, scamsurvivors.org.cn). But after checking it, we find this
name conflict with your company name or trademark. In order to deal with this matter
better, it's necessary to send email to you and confirm whether this company is
associated with your company or not?

Best Regards,
Tony Liu | Service & Operations Manager
China Registry (Head Office) | 6012, Xingdi Building, No. 1698 Yishan Road, Shanghai
201103, China
Tel: +86-02164193517 | Fax: +86-02161918697 | Mob: +86-13816428671
Email: tony@chinaregistry.org.cn
Web: http:/ /www.chinaregistry.org.cn

This email contains privileged and confidential information intended for the
addressee only. If you are not the intended recipient, please destroy this email and
inform the sender immediately. We appreciate you respecting the confidentiality of
this information by not disclosing or using the information in this email.

Header:

Return-Path: <customerservice06@chinaregistry-sx.org>
Delivered-To:
Received: from server1.scamsurvivors.com
by server1.scamsurvivors.com (Dovecot) with LMTP id yPdGF2K1sFmDQwAAcPn/pw
for < >; Thu, 07 Sep 2017 04:56:34 +0200
Return-path: <customerservice06@chinaregistry-sx.org>
Envelope-to:
Delivery-date: Thu, 07 Sep 2017 04:56:34 +0200
Received: from mx58.dns.com.cn ([180.76.192.58]:57741)
by server1.scamsurvivors.com with esmtp (Exim 4.87)
(envelope-from <customerservice06@chinaregistry-sx.org>)
id 1dpmzM-0004Q7-FV
for ; Thu, 07 Sep 2017 04:56:34 +0200
Received: from dr (unknown [101.86.126.93])
by mx58.dns.com.cn (DNS Email Server) with ESMTPA id D8A3310035A
for < >; Thu, 7 Sep 2017 10:55:37 +0800 (CST)
Reply-To: <tony@chinaregistry.org.cn>
Date: Thu, 7 Sep 2017 10:55:34 +0800
From: "Tony Liu<tony@chinaregistry.org.cn>" <customerservice06@chinaregistry-sx.org>
To: < >
Subject: CN domain and keyword
Message-ID: <20170907105543130234@chinaregistry-sx.org>
X-mailer: Foxmail 6, 13, 102, 15 [cn]
Mime-Version: 1.0
Content-Type: multipart/alternative;
boundary="=====003_Dragon370880283160_====="
X-Scanned-By: AntiSpam on 127.0.0.1
X-Spam-Status: No, score=1.2
X-Spam-Score: 12
X-Spam-Bar: +
X-Ham-Report: Spam detection software, running on the system "server1.scamsurvivors.com",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: (Please forward this to your CEO, because this is urgent.
Thanks) We are the domain name registration service company in China. On Sep
4, 2017, we received an application from Jiatai Ltd requested "scamsurvivors"
as their internet keyword and China (CN) domain names (scamsurvivors.cn,
scamsurvivors.com.cn, scamsurvivors.net.cn, scamsurvivors.org.cn). But after
checking it, we find this name conflict with your company name or trademark.
In order to deal with this matter better, it's necessary to send email to
you and confirm whether this company is associated with your company or not?
[...]

Content analysis details: (1.2 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
1.2 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist
[URIs: chinaregistry.org.cn]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[180.76.192.58 listed in wl.mailspike.net]
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/Dns ... nsbl-block
for more information.
[URIs: chinaregistry.org.cn]
0.0 T_SPF_PERMERROR SPF: test of record failed (permerror)
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 BAYES_20 BODY: Bayes spam probability is 5 to 20%
[score: 0.1189]
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
X-Spam-Flag: NO

Phones:
+8602164193517
+862164193517
Number billable as geographic number
Country or destination China
City or exchange location Shanghai, SH

+8602161918697
+862161918697
Number billable as geographic number
Country or destination China
City or exchange location Shanghai, SH

+8613816428671
Number billable as mobile number
Country or destination China
City or exchange location
Original network provider* China Mobile

[Big Al]

To whom it concerns,
We will register the China domain names "scamsurvivors.cn" "scamsurvivors.com.cn"
"scamsurvivors.net.cn" "scamsurvivors.org.cn" and internet keyword "scamsurvivors"
and have submitted our application. We are waiting for Mr. Tony Liu's approval and
think these CN domains and internet keyword are very important for our business.
Even though Mr. Tony Liu advised us to change another name, we will persist in this
name.
Kind regards
Gareth Jing

Return-path: <garethjing@gmail.com>
Received: from zub (li815-70.members.linode.com. [106.185.53.70])
Date: Fri, 8 Sep 2017
From: "Gareth Jing" <garethjing@gmail.com>
Subject: scamsurvivors

[Big Al]

Dear

We have already advised them to choose another name according to your company that
have no relationship with them, but they insist on this name as China domain names
(scamsurvivors.cn, scamsurvivors.com.cn, scamsurvivors.net.cn, scamsurvivors.org.cn)
and internet keyword. In our opinion, maybe they do the similar business as your
company then register it to promote his company.

As is known to all, domain name registration based on the international principle is
opened to company and individual. Any company or individual have the right to
register any domain name and internet keyword which are unregistered. Your company
haven't registered this name as China domains and internet keyword, so anyone is
able to obtain them by registration. But in order to avoid this conflict, the
trademark or original name owner have priority to register China domain name and
internet keyword during our dispute period. If your company is the original owner of
this name and want to register these China domain names (scamsurvivors.cn,
scamsurvivors.com.cn, scamsurvivors.net.cn, scamsurvivors.org.cn) and internet
keyword to prevent anybody from using them, please inform us. We can send you an
application form with price list to help your company register these China domains
and internet keyword during our dispute period.

Best Regards,
Tony Liu | Service & Operations Manager
China Registry (Head Office) | 6012, Xingdi Building, No. 1698 Yishan Road, Shanghai
201103, China
Tel: +86-02164193517 | Fax: +86-02161918697 | Mob: +86-13816428671
Email: tony@chinaregistry.org.cn
Web: ww w.chinaregistry.org.cn

This email contains privileged and confidential information intended for the
addressee only. If you are not the intended recipient, please destroy this email and
inform the sender immediately. We appreciate you respecting the confidentiality of
this information by not disclosing or using the information in this email.

Header:

Return-Path: <tony@chinaregistry.org.cn>
Delivered-To:
Received: from server1.scamsurvivors.com
by server1.scamsurvivors.com (Dovecot) with LMTP id mXI3GENxtlmaOAAAcPn/pw
for < >; Mon, 11 Sep 2017 13:19:31 +0200
Return-path: <tony@chinaregistry.org.cn>
Envelope-to:
Delivery-date: Mon, 11 Sep 2017 13:19:31 +0200
Received: from out28-97.mail.aliyun.com ([115.124.28.97]:43120)
by server1.scamsurvivors.com with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.87)
(envelope-from <tony@chinaregistry.org.cn>)
id 1drMkO-0003i1-IY
for ; Mon, 11 Sep 2017 13:19:31 +0200
X-Alimail-AntiSpam: AC=PASS;BC=-1|-1;BR=01201311R681e2;FP=0|-1|-1|-1|0|-1|-1|-1;HT=e02c03299;MF=tony@chinaregistry.org.cn;NM=1;PH=DS;RN=1;RT=1;SR=0;TI=SMTPD_---.8sJq0hY_1505128720;
Received: from mqmpsl(mailfrom:tony@chinaregistry.org.cn ip:101.86.126.219)
by smtp.aliyun-inc.com(10.147.40.7);
Mon, 11 Sep 2017 19:18:40 +0800
Date: Mon, 11 Sep 2017 19:17:26 +0800
From: "Tony Liu" <tony@chinaregistry.org.cn>
To: < >
Subject: Re: Re: scamsurvivors CN domain and keyword
Message-ID: <20170911191739285041@chinaregistry.org.cn>
X-mailer: Foxmail 6, 13, 102, 15 [cn]
Mime-Version: 1.0
Content-Type: multipart/alternative;
boundary="=====003_Dragon505138242244_====="
X-Spam-Status: No, score=0.8
X-Spam-Score: 8
X-Spam-Bar: /
X-Ham-Report: Spam detection software, running on the system "server1.scamsurvivors.com",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.


Content analysis details: (0.8 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/Dns ... nsbl-block
for more information.
[URIs: chinaregistry.org.cn]
1.2 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist
[URIs: chinaregistry.org.cn]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[115.124.28.97 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
[score: 0.0000]
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.5 KAM_NOCONFIDENCE Confidential information sent with no security
X-Spam-Flag: NO

[paulaulloa]

Hello, please help me, I have the same kind of emails you show it. What is the purpose of those emails? please write to me xxx. Thanks

Member's email address removed.

[SlapHappy]

The purpose is to steal your money or your identity, and possibly infect your computer with malware and viruses if you click on any link or go to any of the websites mentioned. The company is fake. Do not reply. Delete the email and ignore them.

Read this:
Re: How the scams work / Identity theft
viewtopic.php?f=3&t=24589&start=10#p155082