We got a mail like following; --------------------- Hello, We have noticed that you have modified the Contact Details of the domain name XXXXXX.NET. However, to prove the authenticity of this domain name and avoid it getting Suspended in the next 48 hours, please FAX us the following at EITHER +1 (320) 210 5146 (USA) OR +91 (22) 6679 7508 (India): A letter on the Registrant's Letterhead [signed], stating that the current Contact Details of the domain name XXXXXX.NET are ACCURATE, as per the WHOIS Lookup Results at http://whois.publicdomainregistry.com alongwith a proof of correct contact details like some kind of identification proof copy of utility bills like electricity bill or telephone bill etc. Alternatively you may scan it and send it as an attachment with this ticket or email it to . Feel free to contact us, if you need any further assistance. -------------------------- Now what to do? What kind of letter are we gonna write? Any examples or ideas? Thanks in advance.
Are the whois details for the domain inaccurate? If you send them the details requested, you should have no problems
There is privacy protection on the domain whois. I am ready to send them the details but I don't know what kind of letter to write. Some example would be good.
They want a fax sent to India? It sounds like someone in India is trying to scam the contact details of the domain from you so they can use that info to hijack the domain. The number in the US is probably an e-fax number or something like that. They sound pretty dumb though because the scam operators probably use that template to fool Indians and this guy screwed up by leaving the Indian fax# in the phishing mail.
LOL how would some random person sitting in India get their hands on an ICANN complaint? ICANN would not use as their contact email and I doubt they would outsource their work to someone in India who does sucha great job of making it look like a scam.
The better way is to contact thru support numbers , and describe the situation , I think it's most likely someone is trying to get your contact details . 1. check if your account suspended or not 2. Contact with them directly by phone I think it's the best decision
No. But ICANN can forward the invalid WHOIS complaint to the registrar per their contracts. Try this, leet: "Name of registrar contact (if any, based on the original response) Position (if any) Address Dear Mr. Name (or registrar personnel), I am writing you in response to your request for authenticating the data listed in the WHOIS database for the domain name yourdomain.net. The information shown is correct and matches the letterhead where this request is made. Please contact me as soon as possible if there is anything else needed. I have every intent to comply with the terms of our agreement and maintaining our business relationship. Thank you, Sincerely, Your Name Your contact details" This is just a generic letter at the top of my head based on my previous work having dealt with this issue. And make sure the name and address of your LH matches that of your account for that domain name. On the side, this has just given me yet another idea what to blog about.
I would hesitate to even give that information out, just in case it can be used in some future social engineering trickery related to that domain.
Why not just contact your registrar if they did send out such a letter to you ? If they did then comply, otherwise you stand the chance of losing the domain name. Were the information provided accurate, I mean the information behind the Whois Privacy.
^ Do what Dave Zan suggested. It's the best option. Someone has probably sent ICANN a Whois data problem report. You should comply with the request or else your domain will be really suspended. Also, please check the received email's header... it might be a phishing attempt and send the letter to your registrar only. That keeps you safe. Good luck, I hope you could get this thing fixed... asap
Yeah, contact your registrar by the details on their webpage, they'll confirm if the letter is false or not.
I am almost 100% sure that the letter is genuine as I searched thru the internet and found many other people who have faced with this issue and some of their domains have actually got suspended. I sent them what they wanted and everything seems ok so far. I'll keep you all updated, thanks everyone for their replies.
Understandable. I forgot to mention the last part for contact details is to give an email or a phone number to be contacted for such. However, one can always check with the registrar who sent the report since it never hurts to check. Unfortunately I've read about DirectI/PDR being quite "strict" about things like this.