1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Phishing attempt

Discussion in 'BlackHat Lounge' started by jason13, Jun 24, 2015.

  1. jason13

    jason13 Newbie

    Joined:
    May 25, 2015
    Messages:
    23
    Likes Received:
    1
    Just a couple days ago i received an email from a "domain broker" who wanted to buy one of my domains on behalf of his "serious investor".

    It took me a while to detect the phishing attempt since i had never received any email like that before, so i played along :p

    Here is the whole communication, i hope this might be helpful for someone.

    RED = "the Broker"
    GREEN = me

    Hello! I represent an investor from Europe who would like to buy xxxxxxxxxx.com for a new project.
    My client is a co-owner of several Internet companies.
    Are you still interested in selling this domain?
    If so, please reply back and we will negotiate the price and discuss the sale process.
    I have regular meetings with many major domain investors.
    If you have other names for sale, please email me the list.
    Best Regards,
    Shlomo Greenberg
    Lawyer
    96 Hanassi Avenue
    Haifa
    34642
    Israel

    -----------------------------------
    Hi and thanks for contacting me.
    xxxxxxxxxx.com is still available for sale.
    Let me know your offer and the details of the transaction process.
    Please feel free to ask me anything.
    Thank you again for your interest.
    Best Regards,
    xxxxxx xxxxxx


    ------------------------------
    My client can pay you a price in $75,000 - $95,000 range.
    The exact figure will depend on the appraisal results (see below). Before we go further we need only one thing from you:
    My client is a professional investor and he buys certified domains only.
    If your domain has been certified, please email me the certificate and we will proceed with the sale. If you don?t have a certificate it?s not a problem. I may send you a link where you can obtain it. Please don?t worry. It takes 1-2 minutes to order it. The results will be sent to you within 24 hours. Then you send me the certificate via email and we?ll proceed with the sale

    The certification includes the following:

    1. Independent valuation of the market price. It will show your domain name is not overpriced. On the other hand if the valuation comes higher we will increase the price accordingly.

    2. Trademark infringement verification. It proves your domain has no trademark problems.

    3. Verification of the owner. It proves you are a legitimate owner and your domain has no any obligations and restrictions. I?m sure that you are a legitimate owner so it will be only a formality.

    As a middleman I?m very interested in a good valuation part of this certificate because my client pays me a commission (10-15% of the sale price) on every domain purchase. So I?m not interested in a low price too.

    You can read about the certificate agency at
    answers-google.org / answers / threadview / id / 189826.html (?Domain Broker? is my nickname).

    The process is very easy:

    1. Go to the certificate agency site and order a certificate. Just submit your domains and let them know you have a buyer with $XX,XXX offer and need a valuation near this value. After several hours you will get the results. If the price in your certificate comes higher we will increase our offer accordingly.

    2. Then send these results via email and we?ll proceed with the deal.

    If you are new to the certification process, I can help you with the step by step instructions.


    Oooopsss... Is there an "answers-google ORG"???

    So i go on...

    Hi and thanks for your answer

    I would like to say that the price of 75 - 95,000 is overpriced

    The domain's value is a lot less.

    Other than that, i have no experience in domain certification process, so i would appreciate a little help.

    Thanks again

    Best Regards,
    xxxxxx xxxxxxx


    --------------------------

    Yes, I think $50,000 is more reasonable. Of course, you must be sure you will sell it for at least $50,000. To avoid any risks just contact their support at "[FONT=Arial][SIZE=2][COLOR=#ff0000]DomainTrademarks" Contact Page[/COLOR][/SIZE][/FONT] regarding a possible appraised value for your domain. Please specify your domain and let them know you have a buyer with $50,000 offer and need a valuation near this value. Just ask them if it's possible or not. If you receive a positive response, you will proceed with the certification. If not, you don't lose anything.

    By the way domaintrademarks is freshly registered and they charge $150 for a certificate... That's the "you don't lose anything"

    Just asked for a valuation. Let's see their response.
    Are you willing to pay for the certification costs?


    Thanks again
    Best regards,

    -------------------------------------------------

    This is your responsibility to pay for the certification. The certificate will become your own property. It will increase the value of your domain.

    Please let me know the certification results after you get them.

    ----------------------------------

    Hi again

    the domain is already up for auction at Flippa
    If you are still interested, you can buy it from there.
    I am not gonna spend 150+ for a certificate from your company when i can get the same one as low as $4 from godaddy.
    Thanks again for your interest,
    best regards


    ----------------------------

    Unfortunately, GoDaddy does not provide a full certification my client needs. Their service is cheaper but it does not contain many things.
    Nobody will do a serious research for $4.
    Your domain has no offers and your chances to sell are very small.
    There is no risk for you.
    I understand your concerns. Earlier I worked for Afternic and Sedo. I've helped hundreds of domain owners to sell their domains. I'm using my experience and my relations in the industry to help other people to buy and sell domain names. I take care about my reputation.
    Please don't worry. My buyer is a serious investor. He will buy your domain after you order the certificate. I give you 100% guarantee.

    ---------------------------------------------

    LOL Nice try bro

    ---------------------------------------------

    Still waiting for his response...


     
    Last edited: Jun 24, 2015