Friday, July 3, 2015

Domain purchase scam

I hold a few domains under my name, mostly because they're all related to some idea I once had and wanted to build. I didn't buy them with the intention of selling them, but recently I ran into the site Flippa.com which gives you a platform to sell domains. Since I never ended up doing anything with the domains I figured I'd put them up for sale, and if by some chance someone is really interested in one of the names I'll make a few bucks.

A few days ago, someone tried to scam me. So I'm sharing this in hope to inform or educate some others.

How did they reach me ?
I believe the scammer saw I was trying to sell a site on flippa and decided to contact me. I'm 100% sure this isn't related to flippa in any way, so I'm not blaming them in any way. The scammer could've just seen my domain for sale, and found my email in the whois database.
I always put my real details in the whois database, which exposes you to spam and scams like this, but this doesn't bother me, you just need to be careful. There are sites offering you to purchase privacy in the whois database - I think this is useless, and wouldn't spend money on this.

First Email
I received an email from someone named "Shlomo Greenberg" saying he's representing an investor from Europe that's interested in a specific domain of mine. He asked if I'm willing to sell, and if so, we'll negotiate the details in the next mail.

Hints this might be a scam
The first hint I had is that the email was a 'gmail' account, but gmail was smart enough to notify me that the 'from' address might be forged. I have never seen this message, but it looks like this :


Why is this a hint of a scam ? Because if someone is automating the emails, then they're sending it from some other server, and just forging the 'gmail' account to make it look like someone personally contacted me.

That being said, this probably doesn't mean 100% scam! I have never seen this before, but I'm sure this might happen in cases where you're not being scammed. This shouldn't stop you immediately, but this is a clear sign to proceed with caution.

Some basic investigation
Because of the gmail notice that seemed fishy, and because I'm a curious person by nature, I decided to do some very basic research about the person contacting me. You don't have to be a private investigator to do this, the simplest common sense will take you a long way.
The mail was signed by a "Shlomo Greenberg" and it said "Lawyer" next to it. It also had an Israeli address. I searched the internet for his name, with and without a lawyer prefix, in English and in Hebrew, but couldn't find anything. I also searched on google maps for the address he added, but it seemed to lead to some coffee shop.
(I'm not saying this Shlomo Greenberg guy isn't a real lawyer, maybe he is, but I couldn't find anything about him online, and as someone who claims to represent a European investor I would imagine that something would come up).

My reply
At this point, I still wasn't sure if this is a scam or not, but figured I have nothing to lose. I replied saying that I'm willing to sell for $2000, and let me know if the investor can pay that amount.

The scam!
I received an email back saying that the price isn't a problem for the investor, but they want a "domain certificate" so they know it's legit.
What is this "domain certificate" ?
He added a link to a page on "Google Answers" that someone asked how to get a domain certificate, and some other user answered with a link to a site to buy certificates. He said I should go to that link, and get a certificate.
He also explained that the certificate is to give an evaluation about the price of the domain, validate ownership, and to do some basic due-dilligence on the trademark.


At this point I knew it was a scam for quite a few reasons.

First, the "Google Answers" link he gave me wasn't a real google answers page. It was linked to "www.google-answers.org" which isn't a domain owned by google (according to whois), but it was perfectly crafted to look like a google answers page.
Google answers is a product that closed a long time ago. I never searched anything on google even and ran into quality search results on google answers, so even if it was a real google answers page, I wouldn't give it any credit.

Second, the link to get the domain certificate looked bad. I'm a web designer, so i have an eye for basic web design. It seemed very unprofessional, and didn't seem related to any official organization related to world wide web standards or anything like that.


Third, the certificate cost ~$150.

Lastly, if you're selling a domain, you shouldn't need to purchase any certificate of any sort!
Validation of ownership is done via whois, and if your details aren't there then you can simply transfer the domain via an escrow service which will easily protect both sides in the transfer.
There is no reason for someone selling a domain to do any due-dilligence. If someone ever asks you for this, it's bullshit. They can (and should) do all the research they want before purchasing the domain from you on there own.
Finally, I believe that the whole domain appraisal business is bullshit! I see people on flippa writing "this site got an appraisal of Xk dollars!". I don't believe there's an actual way to do a domain appraisal, and even if there is, it shouldn't mean anything to the seller. You should sell the site for as much as you can get someone to pay for it. If you can't get someone to pay more for it, then it doesn't matter how much you *think* it's worth, it's obviously not.


Benefit of the doubt
At this point, although I was sure it was a scam, I wanted to see how this would roll out. Obviously I'm not going to buy a domain certificate, but I replied kindly, stating that I am not going to spend the money for the certificate, but the buyer can pay for it if they want to.
I explained that I'm willing to do an escrow transfer so we're both protected.
Needless to say, I didn't get any response back...


Beware of scams!
There will always be people out there thinking of elaborate ways of scamming you, and spending time and money into crafting the techniques. The only reason they continue to do this is because it works to some extent.
Let's try to stop it, so the scammers will eventually realize it's not worth it neither.

42 comments:

  1. Extremely helpful post. This is my first time i visit here. I discovered such a large number of intriguing stuff in your blog particularly its exchange. Truly its extraordinary article. Keep it up. visit website

    ReplyDelete
    Replies
    1. Domain purchase scams are fraudulent schemes where scammers trick individuals or businesses into purchasing domains or domain-related services under false pretenses. These scams can result in financial loss, unauthorized access to sensitive information, and other negative consequences. Here's how to recognize and protect yourself from domain purchase scams.

      Fake Renewal Notices:

      Scammers send fake renewal notices, warning you that your domain is about to expire and urging immediate payment.
      Domain Appraisal Scams:

      You receive an unsolicited offer to buy your domain for a high price, but the buyer insists on an appraisal from a specific (fake) service first.

      domains in computer science

      Domain Slamming:

      You receive a misleading transfer request disguised as a renewal notice, tricking you into transferring your domain to a different registrar.
      Phishing Scams:

      Scammers send emails pretending to be from your registrar, asking for login details or payment information.
      Trademark Infringement Scams:

      Scammers claim that someone is trying to register a domain similar to yours and offer to sell it to you to prevent "trademark infringement."

      Final Year Project Centers in Chennai

      IEEE projects for cse

      Delete
  2. It is imperative that we read blog post very carefully. I am already done it and find that this post is really amazing. gizlilikveguvenlik.com

    ReplyDelete
  3. The web site is lovingly serviced and saved as much as date. So it should be, thanks for sharing this with us. vpnveteran.com

    ReplyDelete
  4. Extremely intriguing online journal. A lot of web journals I see nowadays don't generally give anything that I'm keen on, however I'm most definitely inspired by this one. Recently felt that I would post and let you know. privacyinthenetwork

    ReplyDelete
  5. Nice blog..! I really loved reading through this article. Thanks for sharing such a amazing post with us and keep blogging... best angularjs training institute in chennai | angularjs training in omr | .angular 4 training in chennai | angularjs training in velachery |

    ReplyDelete
  6. I have looked couple of days and discovered some spellbinding formed work on it. In any case, it is the best of all. deze website

    ReplyDelete
  7. The data you have posted is extremely valuable. The locales you have alluded was great. A debt of gratitude is in order for sharing... https://allertaprivacy.it

    ReplyDelete
  8. Excellent Blog. I really want to admire the quality of this post. I like the way of your presentation of ideas, views and valuable content. No doubt you are doing great work. I’ll be waiting for your next post. Thanks .Keep it up! Kindly visit us @
    Christmas Gift Boxes | Wallet Box
    Perfume Box Manufacturer | Candle Packaging Boxes | Luxury Leather Box | Luxury Clothes Box | Luxury Cosmetics Box
    Shoe Box Manufacturer | Luxury Watch Box

    ReplyDelete
  9. Hey mate, .This was an excellent post for such a hard subject to talk about. I look forward to seeing many more excellent posts like this one. Thanks website tips

    ReplyDelete
  10. Admiring the time and effort you put into your website and in depth information you offer. It’s good to come across a blog every once in a while that isn’t the same out of date rehashed material. Great read! I’ve saved your site and I’m including your RSS feeds to my Google account. web design tips

    ReplyDelete
  11. How much of an unique article, keep on posting better half branding

    ReplyDelete
  12. It is very interesting topic you’ve written here..The truth I’m not related to this, but I think is a good opportunity to learn more about, And as well talk about a different topic to which I used to talk with others website design

    ReplyDelete
  13. These kinds of Search marketing boxes normally realistic, healthy and balanced as a result receive just about every customer service necessary for some product. Link Building Services branding

    ReplyDelete
  14. Great article mate, keep the great work, just shared this with ma friendz device mockups

    ReplyDelete
  15. I am glad that it turned out so well and I hope it will continue in the future because it is so worthwhile and meaningful to the community. ipad mockups

    ReplyDelete
  16. It’s really a nice and helpful piece of info. I’m glad that you just shared this helpful info with us. Please keep us informed like this. Thanks for sharing. macbook sketch

    ReplyDelete
  17. certainly like your web site but you have to take a look at the spelling on quite a few of your posts. Several of them are rife with spelling problems and I in finding it very bothersome to inform the reality then again I will surely come again again. phone mockup psd

    ReplyDelete
  18. Yeah bookmaking this wasn’t a bad decision great post! . mobile mockup

    ReplyDelete
  19. The urge to gamble is so universal and its practice so pleasurable, that I assume it must be evil. webflow company

    ReplyDelete
  20. The elegance of those blogging engines and CMS platforms will be the lack of limitations and ease of manipulation that permits builders to implement rich subject material and ‘skin’ the website in such a way that with really tiny effort one particular would by no means discover what it truly is making the internet site tick all with out limiting content material and effectiveness. webflow experts

    ReplyDelete
  21. I simply couldn’t go away your website before suggesting that I actually enjoyed the standard information an individual provide on your visitors? Is gonna be back frequently in order to inspect new posts. web development company

    ReplyDelete
  22. Rather than produce the same old content you have taken this subject to a whole new level . Kudos for not following the standard writing crowd. web developers

    ReplyDelete
  23. Thanks for sharing this quality information with us. I really enjoyed reading. Will surely going to share this URL with my friends. product design firms

    ReplyDelete
  24. It was a very good post indeed. I thoroughly enjoyed reading it in my lunch time. Will surely come and visit this blog more often. Thanks for sharing. buy instagram video views

    ReplyDelete
  25. Thanks for a very interesting blog. What else may I get that kind of info written in such a perfect approach? I’ve a undertaking that I am simply now operating on, and I have been at the look out for such info. Epik-protocolEPIK

    ReplyDelete
  26. Positive site, where did u come up with the information on this posting? I'm pleased I discovered it though, ill be checking back soon to find out what additional posts you include. combine words

    ReplyDelete
  27. To be honest your article is informative and very helpful. Hp Laptop
    Hp Laptop online

    ReplyDelete
  28. Amazing product thanks for sharing with us It is very informative. If you need any type of boxes you can visit the link.
    E Liquid boxes with logo
    custom made CBD boxes

    ReplyDelete
  29. I'am glad to read the whole content of this blog and am very excited.Thank you.
    wordpress
    ufa88kh.blogspot
    youtube
    UFA88 online casino in cambodia

    ReplyDelete