Sponsored by..

Wednesday, 29 April 2015

cnwebregistry.cn / chinaygregistry.com scam and "Huayu Ltd"

This spam email is actually part of a long-running Chinese scam.

From:    Jim Bing [jim.bing@cnwebregistry.cn]
Date:    29 April 2015 at 14:27
Subject:    Re:"[redacted]"

Dear CEO,

(If you are not the person who is in charge of this, please forward this to your CEO, because this is urgent, Thanks)

We are a Network Service Company which is the domain name registration center in Shanghai, China.
We received an application from Huayu Ltd on April 27, 2015. They want to register " [redacted] " as their Internet Keyword and " [redacted] .cn "、" [redacted] .com.cn " 、" [redacted] .net.cn "、" [redacted] .org.cn " domain names etc.., they are in China domain names. But after checking it, we find " [redacted] " conflicts with your company. In order to deal with this matter better, so we send you email and confirm whether this company is your distributor or business partner in China or not?

Best Regards,

Jim
General Manager
Shanghai Office (Head Office)
3008, Jiulong Building, No. 836 Nandan Road,
Xuhui District, Shanghai 200070, China
Tel: +86 216191 8696
Mobile: +86 1870199 4951
Fax: +86 216191 8697
Web: www.cnwebregistry.cn
Whoever "Huayu Ltd" are is irrelevant, as they aren't actually interested in registering these domains, even if they exist. Instead, this is an attempt by a rogue Chinese domain registrar to get you to buy overpriced and worthless domains.

In this case the spam mentions the domain cnwebregistry.cn, but chinaygregistry.com is also on the same server and will be similarly fraudulent.

This video I made a while ago explains the scam in more detail:



16 comments:

Stephen said...

Yes, beware of SCAM. starts with email from Jim.gong@cnweb.org.cn. First they send a request to register in china .cn and .asia. Then someone else sends an interest in your name.( like they won't give up the persist for it, Mine was from jiang.zhihai0086@vip123.com. Then they send paperwork to register name and internet keyword for a 5 year contract at $158 Euro / year plus $39 euro/year for each .cn .asia .com.cn etc. SCAM-SCAM....

Unknown said...

thanks for posting!! I have just been contacted 10/19/15 and almost paid, but started investigating as my gut said something is not right! LOSERS. MY CONtact was: "jim.wang" . watch out folks. first this guy contacts you , then someone who says, they are going to buy your name in china, then Jim sends you a form! see details below from email header: website looks bogus too, not sure if its real

Received-SPF: temperror (encountered temporary error during SPF processing of domain of cnweb-registry.com)
:
from 127.0.0.1 (HELO mx43.dns.com.cn) (119.254.72.183) by mta1100.mail.ne1.yahoo.com with SMTP; Mon, 19 Oct 2015 07:12:30 +0000
X-DNS-MID:
mx43.dns.com.cn/1445238746/10/259610
Received:
from unknown (HELO 2011-20110905XY) (101.86.121.216) by mx43.dns.com.cn with SMTP; 19 Oct 2015 07:12:26 -0000
Message-ID:
<201510191512193599175@cnweb-registry.com>

Unknown said...

I received the same message 18.10.15. there latest claim is see below, this is after I threatened legal action.

Based on your company having no relationship with them, we have suggested they should choose another name to avoid this conflict but they insist on this name as CN/ASIA domain names (asia/ cn/ com.cn/ net.cn/ org.cn) and internet keyword on the internet. In our opinion, maybe they do the similar business as your company and register it to promote his company.
According to the domain name registration principle: The domain names and internet keyword which applied based on the international principle are opened to companies as well as individuals. Any companies or individuals have rights to register any domain name and internet keyword which are unregistered. Because your company haven't registered this name as CN/ASIA domains and internet keyword on the internet, anyone can obtain them by registration. However, in order to avoid this conflict, the trademark or original name owner has priority to make this registration in our audit period. If your company is the original owner of this name and want to register these CN/ASIA domain names (asia/ cn/ com.cn/ net.cn/ org.cn) and internet keyword to prevent anybody from using them, please inform us. We can send an application form and the price list to you and help you register these within dispute period.

Kind regards

Jim
General Manager
Shanghai Office (Head Office)
3008, Jiulong Building, No. 836 Nandan Road,
Xuhui District, Shanghai 200070, China
Tel: +86 216191 8696
Mobile: +86 1870199 4951
Fax: +86 216191 8697

Timothy C said...

As the owner of a site since 1998, I also got a similar email today. I've redacted the site's name. Jim Wang is still around, apparently...

Dear CEO,

(If you are not the person who is in charge of this, please forward this to your CEO, because this is urgent, Thanks)

We are a Network Service Company which is the domain name registration center in Shanghai, China.
We received an application from Huabao Ltd on January 4, 2016. They want to register " REDACTED " as their Internet Keyword and " REDACTED .cn "、" REDACTED .com.cn " 、" REDACTED .net.cn "、" REDACTED .org.cn " 、" REDACTED .asia " domain names etc.., they are in China and Asia domain names. But after checking it, we find " REDACTED " conflicts with your company. In order to deal with this matter better, so we send you email and confirm whether this company is your distributor or business partner in China or not?


Best Regards,
Jim
General Manager
Shanghai Office (Head Office)
3008, Jiulong Building, No. 836 Nandan Road,
Shanghai, China
Tel: +86 216191 8696
Mobile: +86 1870199 4951
Fax: +86 216191 8697
Web: www.cnweb-registry.com

J said...

I received similar from a 'Jim Bing'. For this post, I removed my e mail address and also my domain name. Hence the 'XXXXX'.



-----Original Message-----
From: Jim Bing
To: XXXXXXX
Sent: Fri, Jan 1, 2016 2:10 am
Subject: Re:"XXXXX.com"

Best Regards,
Jim
General Manager
Shanghai Office (Head Office)
3008, Jiulong Building, No. 836 Nandan Road,
Shanghai, China
Tel: +86 216191 8696
Mobile: +86 1870199 4951
Fax: +86 216191 8697
Web: www.cnwebregistry.net
Dear CEO,
(If you are not the person who is in charge of this, please forward this to your CEO, because this is urgent, Thanks)
We are a Network Service Company which is the domain name registration center in Shanghai, China.
We received an application from Huabao Ltd on December 29, 2015. They want to register " XXXXX " as their Internet Keyword and " XXXXXX .cn "、" XXXXX .com.cn " 、" XXXX .net.cn "、" XXXXXX .org.cn " 、" XXXXX .asia " domain names etc.., they are in China and Asia domain names. But after checking it, we find " XXXXX " conflicts with your company. In order to deal with this matter better, so we send you email and confirm whether this company is your distributor or business partner in China or not?

Consumatore Informato said...

Ty. We've received same mail.

showbizmanager said...

I received a similar email from Jim with the same request and pricing. I am assuming no one signed with with him. Were there any repercussions from Jim in China?

Unknown said...

He's going by Jim Bing this week!

Concerned Citizen said...

I received one too. Responded to the first email. Then googled them and found what I needed to know. Jim Bing can keep his crappy .CN domains, nobody wants them. Have you tried searching a domain on the domain registration website he claims to be from? It doesn't even work. What a joke.

Simon Ward said...

I received one from a Jim Bing, I must admit I replied to the first email (it was addressed to our advertised 'contact@...' address - alarm bells started ringing when I was then contacted by the 'potential buyer' of the domain name...firstly written in the same font with exactly the same wording and secondly I don't know how this person got hold of my personal email address. Staying well clear!

Randy said...

2016DEC01
Scam still in operation with exact same MO - his name this week is Jim GONG. Thanks for posting this blog.

Mel A said...

2016Dec22
Scam still operational. Glad I found this too, I thought being from China it may be a scam. My sports club received this email. Will now delete email. His name is Jim Gong.

Mel A said...

Looks like scam is still going. My sports club received same email and I thought may be a scam. Glad I found this blog site. He's still going by the name Jim Gong!

Unknown said...

I am too late to saw this, i am being cheated & lose about 200 USD.
Is there anyway to stop this guy to continue cheat others people ?

Unknown said...

there is too late for me to saw this, i am being cheated & lose about 200USD.
Is there anyway to stop this guy to cheat others people ?

Unknown said...

Thank you for sharing! Got the same email from a Jim Wang. Sounds fishy so I googled and found this site.