question Looks like spam/scam. Is it?

[tvanrijt]

Hi all,

I have received my fair share of whois based spam/scam (think of SEO services, appraisals etc). Today I got a new one, haven't gotten it before. It looks more legit that others, but I still assume it's spam/scam. I would like your opinion though.

I have a domain that includes the word "Kiwi", its a .com domain. Kiwi also refers to New Zealanders, who are called Kiwis.

Today I got this email:

Hello Administrators,

I am the agent that has been assigned to the re-verification of the Enterprise Cloud Services Account for Bank of New Zealand (1-1NYUV9). You are listed as the administrative contact on the WHOIS record, as such I require you to re-confirm that Bank of New Zealand, is still authorized to create certificates for the following domain:

kiwi....com

All certificates for the above domain will be created under the organization name of Bank of New Zealand.

Please forward to [email protected] confirming that Bank of New Zealand still has permission to create certificates for the above listed domain.

You can also contact Tracey Price ([email protected] ), David Dinnison ([email protected]), Fay Mitchell ([email protected]), Nick Hansen ([email protected]), and Yogesh Shetty ([email protected]) for further information.

Thank you,

Meredith Lagunzad
Verification Specialist
Entrust Datacard
Direct Line:

Why I am hesitant this time:

• Entrustdatacard.com seems ok
• bnz.co.nz is the actual domain for Bank of New Zealand, I am not sure how you could get email addresses from that domain to use for a spam/scam campaign
• Other than Yogesh, I can find linkedin/facebook profiles of the mentioned names with a mention of working at Bank of New Zealand

However, I see no link to my domain and Bank of New Zealand.

What do you think I should do with it?

Anyone else got the same email? Also maybe based on a domain including "kiwi"?

​

 

[deez007]

Hmmm this is definitely an interesting one....

 

[johnn]

Tell them to send the detail information to:
john @ fbi.gov

 

[alcy]

i don't think those bnz emails are the main contact or purpose of this email you got. it says you can "also" contact those people...

so maybe they take chance to give something genuine to you and throw a bone your way, hoping you will concentrate on main contact point/email. which could be spam.

 

[EmadPing]

It is nothing but BS.. domain certificate from Bank of NZ? seriously ?
You do not pay attention to the emails in the bottom, you only pay attention to the sender email address.
Your domain is .com , why bother ? just mark the received email as spam and do not respond.

 

[deez007]

I see in their signature there is a "Direct Line:"

Have u checked if the phone number is valid and if it's is the correct number on the BNZ site?

If it is the correct number then you could just phone this Meredith person and ask her whats plotting...

 

[alcy]

yeah.. like all say it's 99% scam imo

I was just mnaking point that many scammers use a decoy in message to make it look genuine.. like NZ bank or something.. only to then redirect you to scam site or email.

I'd ignore it.

 

[tvanrijt]

Thanks for the opinions guys.

@alcy i realize it is not coming from bank of new zealand but the sender also seems like a legit business.

I might message one of the linkedin people of bank of new zealand. If there is no connection at all, which indeed seems likely, they are at least aware that bnz is used in emails without them knowing.

 

[briguy]

Maybe check this out
https://www.bnz.co.nz/contact

https://twitter.com/bnz
https://www.facebook.com/BNZBank

Maybe this might start the "Ball rolling"..
https://twitter.com/bri_guy/status/786448151079034884