Fake "buyer" via email

[elmoney]

hello friends,

I got the offer to email from "buyer":
This scammer offered me $14,5K and ask for valuate. His website net-hosting-solutions.com redirected to webhostingclue.com with whois owner "Yin Cai"

Who has received such email yet?

from:
[email protected]

Hello!

How much do you want for xxxx.com?

It was listed for sale at Sedo. I'm very interested in this domain. I invest in web projects, domains and hosting businesses.

If you have more names for sale please send me the list with prices.

Best Regards,

Isaac Schumacher

Independent Domain Investor

Former CEO of Domains Magazine
________________________
from: [email protected]

I offer 14500. Before we spend this sum I need to talk to my accountant.

What are your payment details?

Are you a member of domain seller communities/forums? Probably we know each
other under some nicknames?

Best regards,

Isaac Schumacher

Independent Domain Investor

 

[Kate]

Always the same old appraisal scam.

 

[GiftedDomains]

After they burned the previous domains with their scam appraisals, they always create new domains with Godaddy and whois privacy.

---------- Post added at 02:37 AM ---------- Previous post was at 02:34 AM ----------

By the way, i don't believe Nethostingclue.com belongs to the scammer. He just redirected it to that site to make his scam domain look trustworthy. Poor owner of nethostingclue.com probably has no idea (i am not sure but thats what i think). Thats an older domain and these scammers ALWAYS use whois privacy and their domains never remain the same more than few months. Plus they are too stupid and lazy to design a good looking website. Even their appraisal scam websites look like pigeonshit. Therefore i am quite sure nethostingclue.com doesn't belong to the scammer.

---------- Post added at 02:55 AM ---------- Previous post was at 02:37 AM ----------

The really sad thing is that we don't do anything against them.
We just report them in forums, since years.
They are doing this since years and continue to do so.
Even though the case would be difficult, there must be a way to bust these scammers, something like a class action and everyone pays a small portion.

 

[4pm]

same guys - best-unix-hosting-plans.com, net-hosting-solutions.com, webhostingclue.com etc

numerous reports in Warnings & Alerts section

please post email originating IP if possible



*

 

[Atomic Domains]

Well, I can tell you that he is some guy from Netherlands. I am close to finding out who exactly this guy is. I think he is a NP member. I will post his username when I am 100% sure it is him.

 

[Kate]

Really ? I thought they were from the Russian Federation.
But I know there are copycats out there, running the same basic script.

 

[laladomains]

I received a similar message !

What exactly is this scam?? what they do exactly?? and how can i avoid from it??

thank you for your help!!!
lala

 

[Ms Domainer]

*

He asks for payment details. Maybe he hopes that some excited noobs will hand over their banking details?

*

 

[sofiapartner]

No - this is just to look more real. Its the same old "appraisal" scam. I would like to meet this guy in person... for 2 minutes... in empty room.

 

[verbster]

hello friends,

I got the offer to email from "buyer":
This scammer offered me $14,5K and ask for valuate. His website net-hosting-solutions.com redirected to webhostingclue.com with whois owner "Yin Cai"

Who has received such email yet?

I just received an inquiry from David Rapoport, the CEO of lowcost-hosting.com that directs to webhostingclue.com.

Here is the e-mail info asked for. I put xxxx where my domain and e-mail were.
Return-path: <[email protected]>
Envelope-to: [email protected] Delivery-date: Wed, 30 Jan 2013 13:13:57 -0500
Received: from impinc06.yourhostingaccount.com ([10.1.13.106] helo=impinc06.yourhostingaccount.com)
by mailscan06.yourhostingaccount.com with esmtp (Exim)
id 1U0cAX-0006wR-B4
for [email protected]; Wed, 30 Jan 2013 13:13:57 -0500
Received: from n1nlshrout02.shr.prod.ams1.secureserver.net ([188.121.43.194])
by impinc06.yourhostingaccount.com with NO UCE
id uJDq1k00a4BMcyc02JDqpq; Wed, 30 Jan 2013 13:13:50 -0500
X-EN-OrigIP: 188.121.43.194
X-EN-IMPSID: uJDq1k00a4BMcyc02JDqpq
Received: (qmail 11017 invoked from network); 30 Jan 2013 18:13:49 -0000
Received: from unknown (HELO N1NW8SHG113) ([188.121.41.113])
(envelope-sender <[email protected]>)
by n1nlshrout02.shr.prod.ams1.secureserver.net (qmail-ldap-1.03) with SMTP
for <[email protected]>; 30 Jan 2013 18:13:49 -0000
thread-index: Ac3/FY1KhRRFdOWxRoKnUObeACqmmA==
Thread-Topic: xxxxxxx.com
From: <[email protected]>
To: <[email protected]>
Subject: xxxxxxx.org
Date: Wed, 30 Jan 2013 11:13:49 -0700
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft CDO for Windows 2000
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6002.18463
X-Antivirus: avast! (VPS 130130-0, 1/30/2013), Inbound message
X-Antivirus-Status: Clean
X-Antispam: clean, score=30