Chinese company contacts me saying that a company in China wants to register a bunch of domains similar to our domain. This looks like it is a legitimate e-mail, but there are SO MANY scams out there. They contacted the address on our website.
Where my "scam" alert comes on is the letter says to transfer to our "CEO".
Quote:
Dear CEO,
(It's very urgent, please transfer this email to your CEO. If this email affects you, we are very sorry, please ignore this email. Thanks)
We are a Network Service Company which is the domain name registration center in China.
We received an application from Hua Hai Ltd on July 1, 2019. They want to register " tetrawestsolar " as their Internet Keyword and " tetrawestsolar .cn "、" tetrawestsolar .com.cn " 、" tetrawestsolar .net.cn "、" tetrawestsolar .org.cn " 、" tetrawestsolar .asia "domain names, they are in China and Asia domain names. But after checking it, we find " tetrawestsolar " conflicts with your company. In order to deal with this matter better, so we send you email and confirm whether this company is your distributor or business partner in China or not?
|
The e-mail header looks legitimate
Quote:
Return-Path:
Delivered-To: james@682763.696310
Received: (qmail 11464 invoked by uid 78); 2 Jul 2019 09:39:47 -0000
Delivered-To: sales@tetrawest.com
Received: (qmail 11459 invoked by uid 0); 2 Jul 2019 09:39:47 -0000
Received: from unknown (HELO atl4mhib49.myregisteredsite.com) (209.17.115.184)
by 0 with ESMTPS (DHE-RSA-AES256-GCM-SHA384 encrypted); 2 Jul 2019 09:39:47 -0000
Received: from mx19.dns.com.cn (mx19.dns.com.cn [180.76.192.19])
by atl4mhib49.myregisteredsite.com (8.14.4/8.14.4) with ESMTP id x629b3h1012750
for ; Tue, 2 Jul 2019 05:37:05 -0400
Received: from ygh (unknown [115.217.178.157])
by mx19.dns.com.cn (DNS Email Server) with ESMTPA id DC50E100AEF
for ; Tue, 2 Jul 2019 17:37:00 +0800 (CST)
Reply-To:
Sender: info@cnygdomainco.cn
Message-ID: <3A2FB50A1C5CD506D338E7941245EA8A@ygh>
From: "mike.zhang@cnygdomain.cn"
To:
Subject: "tetrawestsolar"
Date: Tue, 2 Jul 2019 17:36:48 +0800
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0CAC_01153CE4.1C3CF5D0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.5512
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512
X-Scanned-By: AntiSpam on 127.0.0.1
X-SpamScore: 2.2
X-MailHub-Apparently-To: sales@tetrawest.com
|