NameSilo

Email Appraisal Scams

Spaceship Spaceship
Watch

Phronesis

Established Member
Impact
48
I know there are threads about this in the warning forum, but as there are new folks coming to this business every day, I thought it would be a good idea to post this here.

If you get an email like this one, beware, it's a well documented appraisal scam.

Usually comes from an address at "bonbon.net".

*****

Hello,

I think you have not sold your domain name yet. I'm very interested in
it. Can you send your price for the domain?

Did you get offers from other people already?

I run a software company. We develop client-server systems and
databases in MS SQL and Delphi. Buying and selling domain names is not my main business. Just another way to invest money and make additional income.

Looking forward to do business with you.

Best regards,
Thomas Lassen Ph.D.
President
BN Engineering

*******

Knowing what it was I offered my domain to him for $20 and got no response for 5 days (why would he respond - I'm not going to get a $20 domain appraised). I wrote to him again and said I gave him the wrong price. I wanted $2,000. He IMMEDIATELY repsonded with the requirement for appraisal from a specific company. One of them is ALLFORDOMAINS.COM though there are others. I just had to write this because it infuriates me that there are scumbags that make a living scamming people.
 
0
•••
The views expressed on this page by users and staff are their own, not those of NamePros.
Unstoppable DomainsUnstoppable Domains
I wonder if anyone has tried writing to this guy's ISP or hosting service. They should shut down his services unless he is crafty enough to mask.
 
0
•••
I received one yesterday. Exactly as you wrote it. I knew from the reply I received today that it was a scam because he wrote about an appraisal service that only HE would want me to use and said this appraisal service was recommended on a message board. He included the link and I checked it out. The link worked yet it was an ARCHIVE and so I checked out the main page and that message board IS NOT IN USE.

I believe he concocted the message board, used different names to spoof posters and recommended certain appraisal services. Also one clue was how he supposedly credited someone's Paypal account and THEN ASKED FOR ESCROW. Ummm aren't you supposed to do that BEFORE you pay someone?

Anyways thanks for posting this, I saw it right away on the main forum index and it verifies everything. And it's too darn bad.
 
0
•••
And his MO is, once you get the appraisal, he strangely looses interest and doesn't return emails.
 
0
•••
:imho:

same threads:
http://www.namepros.com/warnings-and-alerts/135688-another-appraisal-scam.html?highlight=bonbon.net
http://www.namepros.com/domain-name...domain-buyers-email.html?highlight=bonbon.net
http://www.namepros.com/warnings-an...scam-finally-got-it.html?highlight=bonbon.net

since bonbon.net is a network member of hotpop.com
you can contact directly hotpop.com for the abuse report:
http://www.bonbon.net/support.hsp

banned as spammer domain at spews.org:
http://www.dnsstuff.com/tools/ip4r.ch?ip=bonbon.net

there are several abuse report about this domain in the past:
http://groups.google.com/group/news...st&q=bonbon.net+abuse&rnum=2#7273797e720b74f6

but when they're reported somehow they manage to get delisted.
:( HTH
 
0
•••
i get that mail too.
And the name was Kramer. Be aware, there is a lot of similar double crosses
 
0
•••
I'm new to this and I received a very similar email from [email protected], the footer was:

Andrew Riley Ph.D.
President
B O N Engineering

It felt like a scam since he offered an incredibly high price, but I probed a bit.

He then sent me a link to this page advising me to get an "appraisal certificate":

http://domaintalk.ourplace.com/Archive/61048.htm

B-)

I thought I'd post it here so the name and URL show up in searches.

Regards.
 
0
•••
I received such letter...
How can I give his IP?
 
0
•••
received the same scam appraisal email

I received the absolute same scam domain apprasal email today signed by Jonh Riley - www.bonbon.net

Beware dear friends do not lose time on such emails.
 
0
•••
Next email you get from the turkey, email him links to this thread. I'll be adding a specific warning about these guys on my website. Tell all newbies to beware. Unfortunately, so many people are so desperate to sell their names, it's easy to get suckered in by what seems an interested buyer.
 
0
•••
He almost always uses Hotpop as his freemail account. He's used probably dozens of different names. Any time you see 'bonbon.net' in his email address, it's Hotpop freemail.
If EVERYONE who receives this sends 'complaint/warning' letters to Hotpop about abuse of their email system, maybe they will do some serious investigating. They have a link on their site (www.hotpop.com) for this. I sent them a letter outlining what was happening, including enclosing links to threads here. Got a polite form letter saying they follow up all complaints but that they do not reply to these emails.
I think if Hotpop got an email for every person who knows about this scam, they might take a little notice... I think this guy is mailing to THOUSANDS of us.
I recommend anyone who does this use the same header in their email, like 'WARNING! One of your customers is seriously abusing your system!'
That way they'll become familiar with it quickly. Make sure to include a copy of the letter he sent, as well as the email address he used.
This guy is like a human virus, a fungus; let's be the talcum powder, ha.
 
0
•••
bannen said:
If EVERYONE who receives this sends 'complaint/warning' letters to Hotpop about abuse of their email system, maybe they will do some serious investigating.

I don't get - HOW and WHY Hotpop is responsible? You better concentrate on complaining to his/her ISP and hosting company of the domain spamvertised (allfordomains.com ???).
 
0
•••
localpub said:
I don't get - HOW and WHY Hotpop is responsible? You better concentrate on complaining to his/her ISP and hosting company of the domain spamvertised (allfordomains.com ???).


Hotpop isn't resposible; but they state right on their site, and have an email link for it, that they'd like to know if their service is being abused. This guy has used at least 6 different names with their account - that's just the names I've seen, he probably has many more - and is obviously sending thousands of emails with this scam... a blatant abuse of their system. Just one more way to make things hot for the guy if everyone complains/warns Hotpop.
You have another good suggestion. Good idea to get to Allfordomains host directly. That has been slow in coming, because I think there was a little doubt that it was ALL for Allfordomains. I think that's now being pretty well proven.
The point is, this guy's hurting a lot of people's bank accounts, so it's nice for those of us who know his game to make it hot for him in every way we can think of, in order to expose and stop him. If we ever can. Better than just doing nothing.
And remember: this isn't just some guy being annoying, it's an actual criminal act of fraud, and he can be prosecuted. To pose as a 'buyer' when he has no intention of buying, and then suggest his victims pay for a service based on that fake sale, and to bilk a lot of people out of thousands of dollars, is illegal. Everyone is well within their rights to take this investigation as far as they want it.
I've let Hotpop know twice now about this guy abusing their freemail, once for when the guy bilked my domaining partner out of $120 (she fell into the scam immediately, but after the second letter - right after she'd gotten the appraisal - she figured it out), and once when, recently, he sent me the same form letter, using a new name.
Now I'll do a little more investigating, as I'm pretty sure this revolves entirely around Allfordomains. Everyone else who's contacted by this guy, if you all do the same independently, things might happen. I think he's been getting away with it because most people have the same attitude my domain pard and I did, at the beginning: 'Oh, well. It's expensive, but we'll chalk it up to a learning experience.' That attitude has been changing for us, now seeing just how many people he's been harming... especially newbies whose finances aren't very good.
If I come up with anything particularly helpful, I'll post it in thread. Don't let that stop anyone from doing their own investigating.
 
Last edited:
0
•••
I had got an appraisal from allfordomains.com indepenandtly of this scam. Should I be concerend about having given them my cc details? It seemed to be handled by a proper ecommerce merchant? I got the appraisal very quicly and it was very comprehensive?

I got an email for this guy a short while ago. Saw through it straight away and enquired about his location so I doubt I'll hear from him again.

After a bit of detective work he seems to be based in Russia, near Moscow?
 
0
•••
sell247 said:
Should I be concerend about having given them my cc details?

<...>

After a bit of detective work he seems to be based in Russia, near Moscow?

I think you answered your question yourself. I hope you DO realise that giving your cc details to the scam artist from Russia isn't helping it's security. To say the least.

I in your place would call the bank this very instance and cancel the cc.

Good luck.
 
0
•••
DOH! Fortunatley there was about $3 available on it. How is the site allfordomains.com allowed to stay up if it is dodgy? Would someone not have had it blocked long before now? Thanks....and.....DOH! AGAIN.
 
0
•••
Long one, to save future would-be victims...

Sell247:
Allfordomains uses Emetrix as their merchant account; I don't know anything about Emetrix. My partner and I have merchant accounts for a few sites, we use Verisign, who are pretty much considered the leaders in providing safe ecommerce transactions.
I've done some searching but haven't found any complaints about Emetrix. The closest was simply their mention on this site, possibly only coincidentally with the case: http://www.ripoffreport.com/view.asp?id=20417&view=printer
You probably don't need to worry; ecommerce providers (Emetrix, Verisign) do NOT give out cc info to the company who rents their service. For example, if you were to buy something off one of our sites, it is Verisign who does the payment handling entirely, we are only notified that each payment has gone through. You can see the nightmare that would happen if the ecommerce account providers would actually provide this info to anyone who could afford their merchant accounts! But feel free to investigate this further. Go to www.emetrix.com if you have a concern.

How did you find out about the scammer's location? I'm not that adept at computer backtracking. I found out his freemail provider, that's easy, and I Whois'd Allfordomains for address of who owns that domain name [my letter continued after the following:]


http://www.networksolutions.com


Registrant:
Forces, Soft
SForces
3041 S. 6th Street
Kalamazoo, MI 49009
US

Domain Name: ALLFORDOMAINS.COM

Administrative Contact, Technical Contact:
Forces, Soft [email protected]
SForces
3041 S. 6th Street
Kalamazoo, MI 49009
US
509-271-0875 fax: 509-271-0875

Record expires on 28-Nov-2006.
Record created on 28-Nov-2000.
Database last updated on 26-Feb-2006 13:00:22 EST.

Domain servers in listed order:

NS5.ALLFORDOMAINS.COM 212.23.76.201
NS3.ALLFORDOMAINS.COM 206.161.124.226

Registry Status: REGISTRAR-LOCK


Back to me: but I wouldn't know how to find anything deeper.
Still looking for direct evidence of Allfordomains involvement. There's all kinds of things that POINT to them not being legit... or at least, point largely to them being set up to look legit, to just barely provide enough 'front' legitimacy in order to appear legit; and yet there are a dozen things on their site that don't make sense:
- No real contact info: where's a company address, or a person's name to contact, anywhere on this site? You only find these for anyone who advertises on site.
- where are all the 'affiliate' banners/logos? There isn't a single one. Very unusual, for a site that brags about how huge, popular, great it is. Even Emetrix doesn't have a logo placed there. Not a single affiliate to show credibility.
- spelling mistakes: there are spelling mistakes here and there throughout the pages. You just don't find that on a truly legit, popular site. Incidentally, the people doing these scam emails also make a lot of spelling mistakes when replying in person rather than their form letters.
- they make a point of saying they have the #1 information on 'scams' -- and yet they mention absolutely nothing about APPRAISAL scams, ha ha. In their list of scams for you to read about, not one is about how an appraisal scam works -- and it's one of the most popular scams out there in domaining.
- the appraisals: they advertise the 2-tier that's common: cheaper computer-generated appraisals, and more expensive 'human' ones. If you check into a lot of their appraisals - I mean the human ones - you'll find similar names are being appraised at identical amounts. If one 'money' name is appraised at an uneven number (as happened to my pard) and another was identical (like $497.00 - 625.00), you know that, even if a human is involved, he's just plonking the name into the same categorized price list sitting in front of him, and not sitting with a 'group of experts' all looking at the various aspects of your name, rather than just keywords, as they purport.
- sales/listings: they advertise they have over 7,000 names for sale... and that in January alone they sold over 3,600 names. I don't get it; my pard and I have been keeping up on this out of curiousity/investigation... and we see almost all the same names up there, month after month. Doubtless, to maintain some legitimacy, many of their names sell... but we think they're wildly stretching the numbers, and giving no proof or accounting for those numbers.
- listing price: costs you $20 to list a name. Down to $10 each by the time you list 31+ names. They say 'no fees later', it's a one-time cost. Now, maybe this is just me... but I see the price of double reg-fee to just list a name on a site that is questionable, and not well-known in the domaining industry, as rediculously astronomical; like they want their money NOW, fast, in case of what happens later...
Sure, we have to pay % upon selling a domain at Sedo et. al.... but we can also list 1,000 names for free, and only pay that commission/percentage on the few names that sell. And a LOT more people will see your name at sedo than at allfordomains.
- 'average selling price': they say the average selling price of a domain on allfordomains is almost $4,000!!! They make it very unclear with wordage whether this applies to the average 'asking' price on their list, or the average price a domain actually sold for. Very misleading, and, IMO, on purpose in order to get prospective new listers excited.
There's more; but I get so tired of writing about these guys.
There's no doubt allfordomains has some small legitimacy. But is it real, or front? Why would someone go through such a huge amount of time to send business their way, and through fraudulent means, if he's not being paid by them to do so? And why would a legitimate business pay someone to use fraudulent methods to bring in business?
I still have some more questions to answer... but everything about that site, and this scammer-guy, seems to point that they are one and the same entity. That he, or they, ARE allfordomains.
Hope all this writing today helps SOMEONE.
 
0
•••
WOW, thanks for all that info.

I reackon that the sit eis just there to get the $69 out of people. By not stealing their cc details and actually sending an appraisal they can probably legitamately stay in business for ever.

The scam emails are there just to drive traffic to the site and get people to part with their $69?

Poor.

I think emetrix.com are legit. If he was taking the cc details he would be shut down pretty quickly.

I found out about the Russian link from the headers (source code of sender details) from his scam email and the reply email from allfordomains.

"eceived: from chen.mtu.ru [195.34.34.232] by maxmail003.maximumasp.com with ESMTP
(SMTPD32-8.15) id A76B62C00B0; Sun, 26 Feb 2006 11:29:31 -0500
Received: from firstbroker (ppp129-9.dialup.mtu-net.ru [62.118.129.9])
by smtp.MTU.RU (Postfix) with SMTP id DFAA8536687"

Spot the russian link!

Thanks Again for your help.
 
0
•••
Thanks, I wouldn't have known how to do that.
The emailer could be masking with a false address somehow... but I can entirely believe he's Russian, due to the way he wrote as his letters totally fell apart when my pard and I started calling his game. As I mentioned in another thread here, we had some fun with the guy, and his replies quickly took on the characteristics of a totally unstable person; Not that Russians are, any more than we are, but the way he worded his poor grammar and email-screaming we knew that English was definitely not the mother tongue for this guy.
yes, another reason it's going on for so long is that Allfordomains, at least on their site services, seem to be adhering to the letter of the law. Not the spirit of it, but the letter. As mentioned on my post above, the discrepancies on their site can be construed as questionable at best and as just-above-legal at worst; so very difficult to point a finger at them.
The key here lies in finding some real and substantial connection between A4D's and this email scammer. There's obviously some connection... some guy wouldn't just out of the blue do everything he can to send business to some random appraisers he threw a dart at on a list, and for no money/reason. Common and sane sense dictates they're in cahoots. And this fraud IS illegal. Investigation and more smarts are making me think, also as mentioned above, this guy, or guys, ARE allfordomains, not just hirelings at satellite locations doing the dirty work.
Oh well. I think with or without my tiny bit of input, they'll eventually be exposed by someone who knows better how to do these things than I do. But, I'll keep on it :)
 
0
•••
bannen said:
Thanks, I wouldn't have known how to do that.

<off-topic>

This is VERY easy. Just look at the headers of the message. And complain to the owner of the first Received-From: IP address. In NO CASE you should complain to the email service which is after the @ sign. They *ALWAYS* are fake.

</off-topic>
 
0
•••
Appraise.net
Unstoppable Domains
Domain Recover
NameMaxi - Your Domain Has Buyers
  • The sidebar remains visible by scrolling at a speed relative to the pageโ€™s height.
Back