I received this e-mail, definitely phishing attempt…
Appear to be sent through a softlayer box, IP address: 208.43.70.241

Quote:

Dear Domain Account Holder,

You are being sent this notice from ICANN due to the fact that you
currently own an active domain name. ICANN is currently upgrading all
domains from their registry database.

The upgrade will introduce new control options for your domain and easier
access. The new upgrade is required by the registry. All domain users are
expected to submit their domain information manually at
http://www.icannresolve.com/email/l…175&N=5&L=1&F=T with the
required information for ICANN to apply the required updates.

The upgrades will be applied to accounts on a first come, first serve
basis. You have until July 25, 2008 to submit the required information to
avoid service and domain interruption.

Thank you for your time.

Sincerely,

ICANNResolve
ICANN.org Resolutions Department

Domain name : ICANNRESOLVE.COM registered with NameCheap
The guy also appear to own omegagalaxy.com (also registered with NC)
I forwarded the e-mail with full headers to abuse@namecheap.com

 

 

Courtesy of:  http://www.namepros.com/warnings-and-alerts/485264-phishing-e-mail-from-icann-resolve.html

For SEO and search engine purposes, let me restate that for the benefit of the community at large.

DomainSecondhand.com is a scam
DomainSecondhand.com is a scam
DomainSecondhand.com is a scam
“Human hand appraisals”
William Quigley (fake name) is a domain scammer
Quigley@Toughguy.net is a scammer email address
Shirley M. Leurquin is a scam name
509-271-0875 is a scam phone number
This is a scam page: http://domaintalk.ourplace.com/Archive/750328.htm

http://whois.domaintools.com/domainsecondhand.com

Domain name: domainsecondhand.com?
Registrant Contact:
Perfect Privacy LLC
http://perfectprivacy.com
1.4042608491
Fax: +1.4042608493
303 Peachtree Center Ave
Atlanta, GA 30303

http://www.namepros.com/warnings-an…ughguy-net.html

http://snipurl.com/1ufn0

If you have been scammed by DomainSecondhand.com, dispute your changes to your credit card company immediately. Check the back of your card for the phone number. It usually takes 48 hours to process. Report it to your credit buereu if you gave them your credit card number!

If you have been SCAMMED BY DomainSecondhand.com, PLEASE contact their current payment processor at PLIMUS and let them know.

wecare@plimus.com
sales@plimus.com

Also, contact their hosting company
Abuse@corp.web.com

THIS ORGANIZATION HAS BEEN SCAMMING PEOPLE FOR YEARS AND IT IS A BIG OPERATION. THIS IS NOT JUST ONE GUY. PLEASE COPY AND PASTE THIS INTO OTHER FORUMS. TOGETHER WE CAN SHUT THESE GUYS DOWN.

 

Courtesy:  http://www.namepros.com/warnings-and-alerts/401699-domainsecondhand-com-is-a-scam.html

I recently received the following e-mail:
Quote:
Greetings!

****.com has been found via online auctions.

Please let us know the your price and we will consider it.

Our company is investing in High Tech and IT projects. Now the domain market is very attractive for us, since every business in the Internet requires a domain.

Looking forward to do business with you.

Regards,
Anthony Stecker
Vice President
N G (The Next Generation) Services
==================================================
NOTICE - This communication may contain confidential and privileged
information that is for the sole use of the intended recipient. Any
viewing, copying or distribution of, or reliance on this message by
unintended recipients is strictly prohibited. If you have received this
message in error, please notify us immediately by replying to the message
and deleting it from your computer.
==================================================

I e-mailed him back, but I was immediately suspicious in part because the price of my domain was listed on Sedo. I googled him and found this:
http://www.scorpiono.com/the-daily-…mers-good-deals

I got the same follow-up e-mail and it appears that he wants you to get the domain appraised at a site he’s involved with. Just a heads up!

Courtesy:  http://www.namepros.com/warnings-and-alerts/488302-domain-appraisal-scam-careful-if-you.html
This is a new scam that totally is ingenuous when you think about it.

Dear Principal,

We are a domain name registrar centre in HongKong.and in charge of the registeration in ASIA, We have something important need to confirm through your company.

We received a formal application from a company called “Mabths Investment Company” applying to register
Domain names:

philfischer.asia
philfischer.cn
philfischer.com.cn
philfischer.hk
philfischer.in
philfischer.info
philfischer.mobi
philfischer.net.cn
philfischer.tw

Internet brand keyword:

philfischer

In China and also in Asia On the July 3 2008 .
During our auditing procedure we find out that the alleged “Mabths Investment Company” has no trade mark, Intellectual property, nor patent even similar to that word. As authorized anti-cybersquatting organization we hereby suspect the alleged “Mabths Investment Company” to be a domain grabber. Hence we need you confirmation for two things.

First of all, whether this alleged “Mabths Investment Company” is your business partner or distributor in ASIA.

Secondly, whether you are interested in registering these domains. (The alleged “Mabths Investment Company” will be entitled to obtain a domain not needed by original trademark owner.)

If you are not in charge of this please transfer this email to appropriate dept. in order to deal with this issue better, please let someone who is responsible for trademark or domain name contact me as soon as possible.

Best Regards,

Grace
——————————————————————————
Tel:+852-30593099
Fax:+852-31771520
Add:121 Des Voeux Road, Central, Hong Kong
Email:grace@sknet.hk Website:www.sknetservice.hk
——————————————————————————
party is your business partner or distributor in ASIA please DO NOT reply. We will automatically confirm application from your business partner after this audit procedure. we have to notify you, and our registration organization are not responsible for any dispute questions about trade mark, intellectual property nor patent after they succeed in registration.hope you can understand.thank you.

grace

Courtesy:  http://www.namepros.com/warnings-and-alerts/488776-new-registration-scam.html
Many LLLL.com scams are currently going on. Please read this thread, avoid doing sales via Paypal or any currency exchange which isn’t “hard” and be careful no matter who you’re dealing with. I recommend using Moneybookers for all domain name purchases. NP$ are another safe option.

Latest Scam Watch

There’s another very large fraud investigation going on over at the other forum. Moderators over there have recommended people stay away from the following domains until it can be verified who the real owner is:

illu.com poscon@gmail.com Go Daddy Software,.. 2008-04-15 2008-04-15
neoo.com poscon@gmail.com Go Daddy Software,.. 2008-04-15 2008-04-15
bogy.com poscon@gmail.com Go Daddy Software,.. 2008-04-15 2008-04-15
veko.com poscon@gmail.com Go Daddy Software,.. 2008-04-15 2008-04-15
chah.com poscon@gmail.com Go Daddy Software,.. 2008-04-15 2008-04-15
mopi.com poscon@gmail.com Go Daddy Software,.. 2008-04-15 2008-04-15
admy.com poscon@gmail.com Go Daddy Software,.. 2008-04-15 2008-04-15
jeef.com poscon@gmail.com Go Daddy Software,.. 2008-04-15 2008-04-15
skyfish.com poscon@gmail.com Go Daddy Software,.. 2008-04-15 2008-04-15
gtgame.com poscon@gmail.com Go Daddy Software,.. 2008-04-15 2008-04-15
konet.com poscon@gmail.com Go Daddy Software,.. 2008-04-15 2008-04-15
gtoy.com poscon@gmail.com Go Daddy Software,.. 2008-04-15 2008-04-15
cdcm.com poscon@gmail.com Go Daddy Software,.. 2008-04-15 2008-04-15
keti.com poscon@gmail.com Go Daddy Software,.. 2008-04-15 2008-04-15
latt.com poscon@gmail.com Go Daddy Software,.. 2008-04-15 2008-04-15
xran.com poscon@gmail.com Go Daddy Software,.. 2008-04-15 2008-04-15
lave.com poscon@gmail.com Go Daddy Software,.. 2008-04-15 2008-04-15
anbu.com poscon@gmail.com Go Daddy Software,.. 2008-04-15 2008-04-15
jasu.com poscon@gmail.com Go Daddy Software,.. 2008-04-15 2008-04-15
morr.com poscon@gmail.com Go Daddy Software,.. 2008-04-15 2008-04-15
acct.com poscon@gmail.com Go Daddy Software,.. 2008-04-15 2008-04-15
sibe.com poscon@gmail.com Go Daddy Software,.. 2008-04-15 2008-04-15
jins.com poscon@gmail.com Go Daddy Software,.. 2008-04-15 2008-04-15
ftc.net poscon@gmail.com Go Daddy Software,.. 2008-04-14 2008-04-14 Federal Trade Commision(Already has been SOLD)
microgreen.com poscon@gmail.com Go Daddy Software,.. 2008-04-14 2008-04-14
gmeil.com poscon@gmail.com Go Daddy Software,.. 2008-04-13 2008-04-13
gmailcom.com poscon@gmail.com Go Daddy Software,.. 2008-04-13 2008-04-13
gmaii.com poscon@gmail.com Go Daddy Software,.. 2008-04-13 2008-04-13
frgoogle.com poscon@gmail.com Go Daddy Software,.. 2008-04-13 2008-04-13
gmile.com poscon@gmail.com Go Daddy Software,.. 2008-04-13 2008-04-13
gmill.com poscon@gmail.com Go Daddy Software,.. 2008-04-13 2008-04-13
wowmart.com poscon@gmail.com Go Daddy Software,.. 2008-04-13 2008-04-13
youworld.com poscon@gmail.com Go Daddy Software,.. 2008-04-13 2008-04-13

3004.COM
DESIGNK.COM
DTWS.COM
GMDX.COM
HZHZ.COM
ICOZ.COM
JNSP.COM
REEX.COM
YESM.COM
GEHO.COM
WIHY.COM
SMSLIFE.COM
COJI.COM
OSSY.COM
MUKS.COM Ki
IZIP.COM

junto.com poscon@gmail.com Dotster, Inc. 2008-04-13 2008-04-13
bestland.com poscon@gmail.com Dotster, Inc. 2008-04-13 2008-04-13
uspace.com poscon@gmail.com Dotster, Inc. 2008-04-13 2008-04-13
postdata.com poscon@gmail.com Dotster, Inc. 2008-04-13 2008-04-13

achannel.com poscon@gmail.com eNom, Inc. 2008-04-13 2008-04-13
texo.com poscon@gmail.com eNom, Inc. 2008-04-13 2008-04-13
rentsale.com poscon@gmail.com eNom, Inc. 2008-04-13 2008-04-13
advision.com poscon@gmail.com eNom, Inc. 2008-04-13 2008-04-13
blak.com poscon@gmail.com eNom, Inc. 2008-04-13 2008-04-13

eeee.com poscon@gmail.com Moniker Online Ser.. 2008-04-13 2008-04-13
egf.com poscon@gmail.com Moniker Online Ser.. 2008-04-13 2008-04-13
openclub.com poscon@gmail.com Name.com LLC 2008-04-15 2008-04-15
everygame.com poscon@gmail.com Name.com LLC 2008-04-15 2008-04-15
gns.net poscon@gmail.com Network Solutions,.. 2008-04-13 2008-04-13
freesociety.com poscon@gmail.com Rebel.com Services.. 2008-04-15 2008-04-15
cznet.com poscon@gmail.com register.com, Inc. 2008-04-13 2008-04-13
elli.com poscon@gmail.com register.com, Inc. 2008-04-13 2008-04-13
gtoys.com poscon@gmail.com register.com, Inc. 2008-04-13 2008-04-13

I was interested in one of these domains and I’m aware that at least 2 other NPers were in negotiations over some of these names as well. I’d recommend putting off any purchases of any of the names listed above until management over there gets to the bottom of this. The whois details are updated on these domains as per the dates the original poster suggests they were stolen and the current owner seems to be in a hurry to offload these domains, which seems somewhat questionable at best.

Courtesy of http://www.namepros.com/domain-name-discussion/425450-warning-llll-com-scammer-targetting-namepros.html

 

 

Recent events have made it very evident that both PayPal and GoDaddy support and protect internet scamming, identity theft, and fraudulent account activities. PayPal and GoDaddy are giants in their respective market segments and domainers have been using both for years. Domainers trusted their domain sales and transfers in the hands of these two corporations, but I do not think that trend will continue much longer.

Recently there have been a lot of scammers going on to forums and initiating sales and purchases of LLLL.com (4 letter .com domain names.) What happens is the scammer either creates a new username at a forum or he somehow hacks into a preexisting username and emulates another user. The scammer then sends out private messages (PM) to users that have posted their domains for sale and offers to buy them. Once negotiations have ended and a price has been established by both the seller and scammer, the scammer sends payment. Currently these scammers only pay via PayPal and only buy names that are registered at GoDaddy; of course, there is a reason for that.

The scammer sends payment via a STOLEN or HACKED PayPal account, assuming the identity of that person. Once the seller receives/confirms payment via PayPal he or she transfers the domains registered at GoDaddy to the Scammer. In order to complete the transfer of the domain the buyer (scammer) must provide the following information: Name, Complete Address, Country, Phone, and Email corresponding to the GoDaddy account where the domains will be transferred to. Usually, the account information is manipulated to match the identical information as the stolen PayPal account, preventing suspicion. Now the seller transfers the domains to the scammers GoDaddy account. Once the domains have been transferred a confirmation PM is sent and the scammer of course says everything is perfect. The seller goes to sleep happy and the scammer is grinning ear to ear because within minutes the scammer initiates a Chargeback on the stolen PayPal account. A chargeback occurs when fraudulent activity or unauthorized purchases have occurred and PayPal immediately reclaims the funds, without question. After the chargeback is completed the funds in the sellers PayPal account are $0.00. At this point the Scammer has the seller’s domains and the seller has neither the money for the domains nor the domains themselves.

This is where both PayPal and GoDaddy facilitate and condone the scammer’s getaway. The seller calls PayPal and asks,” What happened to my money?”
PayPal responds with, “We are sorry sir but the funds you received for the following transaction were fraudulently acquired and the TRUE owner of the account denies initiating the transaction.”
The seller then asks, “Well, do I get my money back? What about my domains can I get those back?”

PayPal responds with, “Actually sir because domains are an INTANGIBLE item they do not comply with the Seller Protection Agreement and are not covered by PayPal, only TANGIBLE items are covered against charge backs. We recommend contacting your registrar to see if they can help you.”
Seller says, “Ok, so the TRUE owner of the account gets his money back, the scammer gets my domains and I am left with neither! I don’t understand how this is possible. Can you provide me with information that you uncover about the scammer so I can contact him or her?”
PayPal representative, “Unfortunately there is nothing we can do for you on our end. Any information that we find can only be obtained by SUBPEONA. The only thing you can do is take legal action against the perpetrator.”
Seller says something along the line of, “This is unethical and you will hear from my lawyers, I will never use your services again,” and then hangs up.

So that’s step one in the Scammer’s getaway. PayPal is concealing the identity of the scammer; they can easily track him or her down via a reverse IP lookup to see who initiated the transaction. They protect the TRUE owner of the account and the thief but they do not protect the seller? The seller is the one that has to pay the 3.2% fees, for what, what are those fees going towards if they cannot even protect you. If a transaction is for intangible goods then you should not be FORCED to pay their fees, there is no point.

Here comes step 2 in this disappearing act. By now the seller is feeling agitated but still feels that their is light at the end of the GoDaddy tunnel. The seller checks the WhoIs.sc information for the stolen domains and sees that they are still registered to the THIEF and remain in the GoDaddy system. Surely it would be easy to reverse the transfer; it should not be that hard, you have the GoDaddy email along with all the other contact info to which the domains were transferred to…WRONG! You decide to contact GoDaddy and see what they can do. After explaining your situation to the representative they respond with this, “Unfortunately, GoDaddy does not get involved in third party disputes. This is why we have TDNAM, so you can sell your domains safely.”

TDNAM is an online auction site OWNED by GoDaddy wherein the seller must pay a yearly fee of $6.95 and Escrow fees.
Seller says, “WHAT! These domains were stolen from me and they are in your system. They were just transferred hours ago and I can’t get them back?”
GoDaddy, “I’m sorry sir, but since these domains were not transferred via TDNAM we have no responsibility to the buyer or the seller. Once the account change is initiated and accepted we are not involved.”
You go back and forth with the GoDaddy representative but get nowhere, there is nothing you can do, and you just got SCAMMED.
The only way to get your domains back is by legal action or reporting the problem to ICAAN.org. Or by the grace of God you find out who the scammer is and harass them to the point of forfeiture. Other than that you are shit out of luck and there is nothing to be done.

That is how I and countless other sellers got scammed and all we can do is sit here holding the bag. We thought we were safe, but both of these companies take no initiative to solve our problems, despite the crimes involved. It is almost as if they are aiding and abeding criminals. The scammers know every angle, they choose GoDaddy and PayPal because they know that they do not pursue or amend fraudulent transfers and charge backs. The next step is to file a class action lawsuit against PayPal and GoDaddy . All I ask is that anyone that has had this occurrence please email me at benvardag@aol.com, I will compile a list of victims and their situations.

Courtesy of BGMV at http://www.namepros.com

If you have been the victim of a domain scam, either buying or selling please take a moment to post your story here.  If you have had your domain stolen please post the domain and all of the details of the person you think stole it.  Get the word out so others don’t get scammed by these same thieves.

    
Avoid Domain Scams - Buy, Sell Domains Safely. RSS tech , RSS comments