BrianKrebsJul 3, 2023

"If you’ve ever owned a domain name, the chances are good that at some point you’ve received a snail mail letter which appears to be a bill for a domain or website-related services. In reality, these misleading missives try to trick people into paying for useless services they never ordered, don’t need, and probably will never receive. Here’s a look at the most recent incarnation of this scam — #DomainNetworks — and some clues about who may be behind it."

This was more fun than I thought I'd have reporting it out.

https://krebsonsecurity.com/2023/07/whos-behind-the-domainnetworks-snail-mail-scam/

Who’s Behind the DomainNetworks Snail Mail Scam? – Krebs on Security

Show threadStéphane BortzmeyerJul 3, 2023
@briankrebs Note that it does not happen for all domain names, only those registered with a registry that distributes user data.
Show threadBrianKrebsJul 3, 2023
@bortzmeyer yeah it's a scam mostly perpetrated against US domain holders, but there are virtual versions of this scam targeting Europeans
Show threadStéphane Bortzmeyer
@briankrebs Yes, it does not seem targeted against a specific side of the Atlantic ocean but against some TLDs. (It requires access to user data, after all, and its availability depend on the TLD.)
Jul 3, 2023 at 3:11pmWeb
Show threadBrianKrebsJul 3, 2023
@bortzmeyer Ah, right. Bear in mind that these scams often rely on outdated information, so you can get these scam notices even if it was for a domain you registered years ago, before everyone started restricting access to whois data.