We have received several warnings from our valuable customers notifying us that they are receiving renewal emails which appear to be a scam. We have received the following sample renewal email. Please read our further comments below the text copied below:
—– Sample Scam Email Message —-
Attention: Domain PIPELINEPROTECTIONSPECIALIST.INFO
Order #: 150723764
Order Date: May 8, 2014
Bill To: Privacy Service
275 Slater Street, Suite 900
PROCESS PAYMENT NOW
Registration May 8, 2014 – May 8, 2015
Term 1 Year
To: Privacy Service
Don’t miss out on this offer which includes search engine submission for PIPELINEPROTECTIONSPECIALIST.INFO for 12 months. There is no obligation to pay for this order unless you complete your payment by May 23, 2014.
Our services provide submission and search engine ranking for domain owners. This offer for submission services is not required to renew your domain registration.
Failure to complete your search engine registration by May 23, 2014 may result in the cancellation of this order (making it difficult for your customers to locate you using search engines on the web).
Process Payment ForPIPELINEPROTECTIONSPECIALIST.INFO
As you can see in the email above, they are trying to get payment for a fake service : «Our services provide submission and search engine ranking for domain owners. This offer for submission services is not required to renew your domain registration. »
But some of our customers do not read these details and make payments for nothing.
Another example is from the scam company called Domain Registry of Canada. In addition to the scam we mentioned at http://www.sibername.com/support/droc.php, they have now started email our customers. Here is another email to avoid:
> From: “Domain Registry of Canada” <firstname.lastname@example.org>
> Date: May 24, 2014 at 12:40:21 AM CDT
> To: <email@example.com>
> Subject: Domain Registry of Canada, Renewal Notice for michaelkrahn.com; Order # 702158
> Reply-To: <firstname.lastname@example.org>
> Renewal Notice
> Dear Mic.. Kr..hn,
> Your domain name, michaelkrahn.com, expires today!
> You must renew your domain name to retain your online presence.
> To renew your domain name instantly online visit https://www.droc.ca/renew.asp
> Or you may call our customer service center toll free at 1-866-434-0212
> 1 Year renewal… michaelkrahn.com Saturday, May 24, 2014 – Sunday, May 24, 2015 for $45.20
> 2 Year renewal… michaelkrahn.com Saturday, May 24, 2014 – Tuesday, May 24, 2016 for $79.10
> 5 Year renewal… michaelkrahn.com Saturday, May 24, 2014 – Friday, May 24, 2019 for $180.80
> All prices above include HST
> Your account number is 702158
> In order to renew the name today, please call us at the number below or visit our website
> Domain Registry of Canada
> PO Box 4577
> Markham, Ontario
> L3R 5M7
> (905) 479-2533
Personal or business information, such as name, email address, postal address and telephone number are just some of the bits of information that can often be made fully available through a Whois lookup on the internet. Whois is a tool you can access at http://www.who-is.ca to show the registration details of a domain name. Scammers can easily harvest this information.
A registrant’s full information is required by most of the registries, such as .COM and .NET domain names. CA domain names are the only domain names that have privacy implemented. No public details are disclosed through a Whois lookup unless it is a corporation or the customer explicitly wants it that way. In other words, as a registrar we have to ask for your full details and let Whois list your full details to meet the registry requirements of all except .CA domain names.
The scammers then use the harvested information to send unsolicited emails to the clients that have registered their domain name with Sibername or another registrar. One such email, purporting to be from Sibername, is already making the rounds. The email asks the client for a renewal payment and the potential victims are then asked to click on an Internet link which directs them to a web site that demands their credit card details. The scammers have copied our writing style and layout in order to trick our clients.
The important thing to note here is that you should not ignore all emails from your registrar. Instead, you should carefully review the emails you receive and take action on legitimate ones.
With this in mind, here are some best practices to avoid phishing scams:
- Our domain prices are around $14.95 and if the payment amount exceeds this level, double check the email content;
- Register .ca domain names which come with built in privacy.
- Use our free privacy service for the other domain names . Please note this feature might be paid in the near future.
- Sign up for Sibername’s domain name auto renewal feature.
- Make sure that any payment made goes directly to our payment page https://www.sibername.com and nothing else.
- Please help us put an end to these phishing scam by reporting any suspicious looking emails at email@example.com.
If you have any further questions, please do not hesitate to contact us.