Online Threat Alerts (OTA) - Alerting you to scams and frauds.
Domain name owners be aware of fraudulent Chinese domain name registration emails like the one below that came from the fake website "www.chinaregistry.com.cn". The fraudulent email messages should not be responded to, especially with personal or financial information. And, the instructions in the same fraudulent email messages should not be followed. Every month, thousands of these email messages are sent out by scammers to trick website owners into paying them for a fraudulent service, which the scammers claim will be used to purchase their Chinese (.CN) domain names.
Subject: onlinethreatalerts CN domain and keywordDate: Tue 10/10/2017 11:17From: shawn@chinaregistry.com.cn(Please forward this to your CEO, because this is urgent. Thanks)This email is from China domain name registration center, which mainly deal with the domain name registration in China. On Oct 9, 2017, we received an application from Huikai Ltd requested "onlinethreatalerts" as their internet keyword and China (CN) domain names (onlinethreatalerts.cn, onlinethreatalerts.com.cn, onlinethreatalerts.net.cn, onlinethreatalerts.org.cn). But after checking it, we find this name conflict with your company name or trademark. In order to deal with this matter better, it's necessary to send email to you and confirm whether your company is affiliated with this Chinese company or not?Best Regards,Shawn Zhang | Service & Operations ManagerChina Registry (Head Office) | 6012, Xingdi Building, No. 1698 Yishan Road, Shanghai 201103, ChinaTel: +86-02164193517 | Fax: +86-02161918697 | Mob: +86-13816428671Email: shawn@chinaregistry.com.cnWeb: www.chinaregistry.com.cnThis email contains privileged and confidential information intended for the addressee only. If you are not the intended recipient, please destroy this email and inform the sender immediately. We appreciate you respecting the confidentiality of this information by not disclosing or using the information in this email.
Subject: onlinethreatalerts CN domain and keyword
Date: Tue 10/10/2017 11:17
From: shawn@chinaregistry.com.cn
(Please forward this to your CEO, because this is urgent. Thanks)
This email is from China domain name registration center, which mainly deal with the domain name registration in China. On Oct 9, 2017, we received an application from Huikai Ltd requested "onlinethreatalerts" as their internet keyword and China (CN) domain names (onlinethreatalerts.cn, onlinethreatalerts.com.cn, onlinethreatalerts.net.cn, onlinethreatalerts.org.cn). But after checking it, we find this name conflict with your company name or trademark. In order to deal with this matter better, it's necessary to send email to you and confirm whether your company is affiliated with this Chinese company or not?
Best Regards,
Shawn Zhang | Service & Operations Manager
China Registry (Head Office) | 6012, Xingdi Building, No. 1698 Yishan Road, Shanghai 201103, China
Tel: +86-02164193517 | Fax: +86-02161918697 | Mob: +86-13816428671
Email: shawn@chinaregistry.com.cn
Web: www.chinaregistry.com.cn
This email contains privileged and confidential information intended for the addressee only. If you are not the intended recipient, please destroy this email and inform the sender immediately. We appreciate you respecting the confidentiality of this information by not disclosing or using the information in this email.
Check the comment section below for answers or additional information. Share what you know, or ask a question about this article by leaving a comment below.
Online Threat Alerts (OTA) is not affiliated with or endorsed by any trademark owner mentioned in this article. Some of the information in samples in this article may have been impersonated or spoofed.
28
Received this scam:"(Please kindly forward this to your CEO, because this is urgent. If you believe this has been sent to you in error, please ignore it. Thanks)Dear CEO,We are the domain name registration service company in China. We received an application from Hongyuan Ltd on January 25, 2024. They want to request "onlinethreatalerts" as their internet keyword and China (CN) domain names (onlinethreatalerts.cn, onlinethreatalerts.com.cn, onlinethreatalerts.net.cn, onlinethreatalerts.org.cn). But after checking it, we find this name conflict with your company name or trademark. In order to deal with this matter better, it's necessary to send email to you and confirm whether this company is your business partner in China? Best RegardsNick Liu Service & Operations ManagerChina Registry (Head Office)"
Hi,I have also received this kind of email today as on 19.07.2023. The mail body is like this "(It's very urgent, therefore we kindly ask you to forward this email to your CEO. If you believe this has been sent to you in error, please ignore it. Thanks)Dear CEO DigitalSushma.Com,This is a formal email. We are the Domain Registration Service company in China. Here I have something to confirm with you. On July 19, 2023, we received an application from Hongyuan Ltd requested "digitalsushma" as their internet keyword and China (CN) domain names (digitalXXXXXX.cn, digitalXXXXXX.com.cn, digitalXXXXXX.net.cn, digitalXXXXXX.org.cn). But after checking it, we find this name conflict with your company name or trademark. In order to deal with this matter better, it's necessary to send email to you and confirm whether this company is your distributor in China? Best RegardsThomas Liu Service & Operations ManagerChina Registry (Head Office)Tel: 86-2161918696Fax: 86-2161918697Mob: 86-138164286716012, XingdI Building, No. 1698 Yishan Road, ShanghaI 201103, ChinaIts Totally a fraud details given in the email. Please do not reply to this kind of scam.
Received this:Dear CEO,(It's very urgent, please transfer this email to your CEO. If this email affects you, we are very sorry, please ignore this email. Thanks)We are a Network Service Company which is the domain name registration center in China.We received an application from Hua TaI Ltd on March 13, 2023.................... In order to deal with this matter better, so we send you email and confirm whether this company is your distributor or business partner in China or not? Best Regards**************************************Mike Zhang Service ManagerChina Domain Registry (Head Office)No. 300, Xuanhua Road, Changning District, Shanghai200050, ChinaTel: 86-2161918696 Fax: 86-2161918697 Mob: 86-1582177 1823Web: www(dot)china-registry(dot)net**************************************
(It's very urgent, therefore we kindly ask you to forward this email to your CEO. If you believe this has been sent to you in error, please ignore it. Thanks)Dear CEO,We are the domain registration and solution center in China. On August 28, 2020, we received an application from Hongxin Ltd requested "iva" as their internet keyword and China (CN) domain names (iva.cn, iva.com.cn, iva.net.cn, iva.org.cn). But after checking it, we find this name conflict with your company name or trademark. In order to deal with this matter better, it's necessary to send email to you and confirm whether this company is your distributor in China? Best RegardsSimon Liu Service & Operations ManagerChina Registry (Head Office) Tel: 86-02161918696Fax: 86-02161918697Mob: 86-138164286716012, XingdI Building, No. 1698 Yishan Road, ShanghaI 201103, China***This email contains privileged and confidential information intended for the addressee only. If you are not the intended recipient, please destroy this email and inform the sender immediately. We appreciate you respecting the confidentiality of this information by not disclosing or using the information in this email.Received this in my mail today. Thought it was spam indeed.
July 30, I received the same message from mike-zhang-domainregistry.org.cn
Just got one this morning (1 June 2020). I assumed it was a scam and went online to check. Yup. Into the Trash it goes.
"Von: Simon Liu Datum: 22. Mai 2020 um 09:33:31 GMT 8Betreff: tongatok(It's very urgent, therefore we kindly ask you to forward this email to your CEO. Thanks)Dear CEO,This email is from China domain name registration center, which mainly deal with the domain name registration in China. On 2020-05-22, we received an application from Hongbo Ltd requested "tongatok" as their internet keyword and China (CN) domain names (tongatok.cn, tongatok.com.cn, tongatok.net.cn, tongatok.org.cn). But after checking it, we find this name conflict with your company name or trademark. In order to deal with this matter better, it's necessary to send email to you and confirm whether your company is affiliated with this Chinese company or not?Best RegardsSimon Liu Service & Operations ManagerChina Registry (Head Office)6012, Xingdi Building, No. 1698 Yishan Road, Shanghai 201103, ChinaTel: 86-02161918696Fax: 86-02161918697Mob: 86-13816428671www(dot)chinaregistry(dot)org"Here is another scam.
Thank you for sharing this, I almost fell for it. We are having a problem with fake Chinese web stores falsely advertising our products, so I jumped to the conclusion that they were trying to register our domains on the .cn. A search for "Hongbo Ltd scam" brought me here. By the way, here's an example of a fake store that rips off content from Indiegogo and Kickstarter campaigns: CIQNUI.STORE they have nothing they advertise, though sometimes they send a crappy speaker, just to prevent successful PayPal claims against them.
Here is another scam:"Fra: Kevin Liu Sendt: 8. november 2018 08:53Til: kt-kt-c.dkEmne: kt-c CN domain and keyword (It's very urgent, please transfer this email to your CEO. Thanks)This email is from China domain name registration center, which mainly deal with the domain name registration in China. On Nov 5, 2018 , we received an application from Kaiju Ltd requested "kt-c" as their internet keyword and China (CN) domain names (kt-c.cn, kt-c.com.cn, kt-c.net.cn, kt-c.org.cn). But after checking it, we find this name conflict with your company name or trademark. In order to deal with this matter better, it's necessary to send email to you and confirm whether this company is associated with your company or not? Best RegardsKevin Liu Service & Operations ManagerChina Registry (Head Office) 6012, Xingdi Building, No. 1698 Yishan Road, Shanghai 201103, ChinaTel: 86-02164193517 Fax: 86-02164198327 Mob: 86-13816428671Email: kevin-chinaregistry.org.cnWeb: www.chinaregistry.org.cn"
Kevin is still active as I got it as well
We received that kind of email, too. Searching a little, I found out that, if you answer it is your domain, they reply the other ones insist on registering the name in China and offer you, in the end, to buy the Chinese domain for yourself. But to click on any of their links would be for sure a very expensive mistake!Funny thing: It's a big family. I read from Oliver Liu, but there are Adrian, Thomas, Patrick, Albert, Klaus, you name it, Liu. Family Busines;-)
we received this email too.
I received the same domain name email today (April 29, 2018) from: Simon Liu
Me too (May 8th 2018)from:Jeff Liu (compare with the message above; how creative they are ;o)
This is what I received, so I should just ignore them?From: Nick Liu Sent: Thursday, April 19, 2018 11:19 AMSubject: arrowlink CN domain and keyword(Please forward this to your CEO, because this is urgent. Thanks) We are the domain registration and solution center in China. On April 16, 2018, we received an application from Kaikun Ltd requested "xxxxxx" as their internet keyword and China (CN) domain names (xxxxxx.cn, xxxxxx.com.cn, xxxxxx.net.cn, xxxxxx.org.cn). But after checking it, we find this name conflict with your company name or trademark. In order to deal with this matter better, it's necessary to send email to you and confirm whether this company is your business partner in China? Best Regards,Nick Liu Service & Operations ManagerChina Registry (Head Office) 6012, XingdI Building, No. 1698 Yishan Road, ShanghaI 201103, ChinaTel: 86-02154290702 Fax: 86-02154290703 Mob: 86-13816428671Email: nick-chinaregistry.com.cnWeb: www.chinaregistry.com.cn This email contains privileged and confidential information intended for the addressee only. If you are not the intended recipient, please destroy this email and inform the sender immediately. We appreciate you respecting the confidentiality of this information by not disclosing or using the information in this email."
Yes, ignore them.
We received one as well. The from address is slightly different then mentioned above -- Posting in the hopes someone else doesn't get duped. "*****" are used in place of our domain name."From: Tony Liu Subject: ***** CN domain and keyword (Please forward this to your CEO, because this is urgent. Thanks)We are a Network Service Company which is the domain name registration center in Shanghai, China. On April 11, 2018, we received an application from Kaikun Ltd requested "*****" as their internet keyword and China (CN) domain names (*****.cn, *****.com.cn, *****.net.cn, *****.org.cn). But after checking it, we find this name conflict with your company name or trademark. In order to deal with this matter better, it's necessary to send email to you and confirm whether your company have connection with this Chinese company or not?Best Regards,Tony Liu Service & Operations ManagerCN Registry (Head Office) 6012, XingdI Building, No. 1698 Yishan Road, ShanghaI 201103, ChinaTel: 86-02164193517 Fax: 86-02161918697 Mob: 86-13816428671Email: tony-cnregistry.org.cnWeb: www.cnregistry.org.cn"
Here is another scam:---------- Forwarded message ----------From: Scott Liu Date: Fri, Apr 6, 2018 at 11:51 AMSubject: republicbroadcasting CN domain and keyword(Please forward this to your CEO, because this is urgent. Thanks)We are the domain registration and solution center in China. On April 2, 2018, we received an application from Kaikun Ltd requested "republicbroadcasting" as their internet keyword and China (CN) domain names (republicbroadcasting.cn, republicbroadcasting.com.cn, republicbroadcasting.net.cn, republicbroadcasting.org.cn). But after checking it, we find this name conflict with your company name or trademark. In order to deal with this matter better, it's necessary to send email to you and confirm whether your company have connection with this Chinese company or not? Best Regards,Scott Liu Service & Operations ManagerChina Registry (Head Office) 6012, Xingdi Building, No. 1698 Yishan Road, Shanghai 201103, ChinaTel: 86-02154290702 Fax: 86-02154290703 Mob: 86-13816428671Email: scott-chinaregistry.net.cnWeb: www.chinaregistry.net.cn"
Dear all,What should we do if we have shared the personal information?Best regards,Mike.
Just be careful going forward because the scammers will contact you and attempt to scam you.
OMG! This has happened to us here in Brazil too. After this Thomas Liu indicates a Chinese company is competing for our tradename domains and "keyword".Another message came to us from a pretending person of this HuikaI Ltd to make threat even more realistic:"To whom it concerns, we will register the China domain names "e*sys.cn" "e*sys.com.cn" "e*sys.net.cn" "e*sys.org.cn" and internet keyword "e*sys" and have submitted our application. We are waiting for Mr. Thomas Liu's approval and think these CN domains and internet keyword are very important for our business. Even though Mr. Thomas Liu advised us to change another name, we will persist in this name. Kind regards. Gareth Ning".We also asked for forms and prices in a suspicious way. Now we now know it's another fraud!
Many, many thanks. Our message came from a Daniel Liu. I did respond and was told that the company was still going to pursue getting our site name because we are not "registered" in China. They are also intending to use the "internet word" which is supposed to be like a keyword. I asked him to send us information and rates for registration, already suspicious of the intent. We also found the site that the Registry uses and it looks very real ... too real for my partner's radar. When I searched for the company that supposedly wants our name, I also found this site's listing. Just in time! Thanks for all you do for all of us. <*G*>
I received the same mail so I contacted the guy by calling him on the number in the email. He didn't even speak or understand English. Therefore, I searched for HuikaI Ltd and found this link! Thanks so much.
What should I do if I responded to this, without sharing personal info?
The scammers will continue to send you more scams.
Hi, I received such an email, too. In my German blog I wrote an article about this. Looks like a strange behavior.
The mail we received, came from chinaregistry.org.cn (not the .com.cn). Which one is right?
Both are scams.