How does this website work? “Herakles”

Anyone had any experience with [https://nalli.societycarpet.top](https://nalli.societycarpet.top)?

So I want to purchase a bike on Mercari which is listed by a private seller for JPY 70,000. I searched the bike on Google and this website came up offering the exact same bike with the same listing for JPY 38,550. I’ve ordered it and I’ve recieved an email saying the store will contact me with information on where to send the money via bank transfer. It all seems professional, but most of the products advertised there seem to be reduced prices.

I just don’t want to get scammed before I send the money and my Japanese unfortunately isn’t good enough to fall for anything that might otherwise give away that this is a fake website.

Thank you

13 comments
  1. Hmm, let me see:

    “`
    $ whois societycarpet.top
    Domain Name: societycarpet.top
    Registry Domain ID: D20220701G10001G_83847089-top
    Registrar WHOIS Server: whois.west263.com
    Registrar URL: http://www.west263.com
    Updated Date: 2023-03-06T07:25:54Z
    Creation Date: 2022-07-01T01:45:46Z
    Registry Expiry Date: 2023-07-01T01:45:46Z
    Registrar: Chengdu west dimension digital
    Registrar IANA ID: 1556
    Registrar Abuse Contact Email: abuse@west.cn
    Registrar Abuse Contact Phone: +86.02862778877
    “`

    Random-sounding domain name registered in China last year.

    The domain of the email address listed in the [会社概要](https://nalli.societycarpet.top/index.php?main_page=about_us) is a whole month old:

    “`
    $ whois acreassure.store
    Domain Name: ACREASSURE.STORE
    Registry Domain ID: D353589936-CNIC
    Registrar WHOIS Server: whois.west.cn
    Registrar URL: http://www.west.cn
    Creation Date: 2023-03-13T09:02:33.0Z
    Registry Expiry Date: 2024-03-13T23:59:59.0Z
    Registrar: CHENGDU WEST DIMENSION DIGITAL TECHNOLOGY CO., LTD.
    Registrar IANA ID: 1556
    Domain Status: serverTransferProhibited https://icann.org/epp#serverTransferProhibited
    Registrant Organization: Jian Wu Peng
    Registrant State/Province: Fu Jian
    Registrant Country: CN
    “`

    nalli.societycarpet.top resolves to cloudflare IP addresses, which could be anywhere.

    Now, if we look up the address listed in the 会社概要, it brings us to this genuine website with a .jp domain: http://ashin.ne.jp/ and that website is hosted in Japan.

    This is all remarkably similar to [this other website](https://www.reddit.com/r/Tokyo/comments/122l98z/question_about_buying_online_at_a_not_popular) someone was asking about recently.

    I’m not a betting squid but if I were, I’d bet on the details of the promised bank account being one sold illegally by (for example) a gullible technical intern trainee from Vietnam or somewhere, and that would be the last you saw of that money.

  2. You already got scammed.

    Most of those websites are from China and they just scrap mercari listing and relist on their website.

  3. Do not do any business with .top domains as they are notoriously used by scammers and hackers. If you made an account, reset any account that uses the same password immediately.

  4. Any website that shows you the same listing as a reputable store at a discount should be eyed with suspicion. If the actual listing is full price, who is providing the discount?

  5. The fact they’re offering the exact item listed at half the price was the first red flag.

  6. Just looking at that URL I’m not clicking on it, let alone sending any money!

  7. I’m seeing a LOT of websites like this, appearing to be some kind of free market/online store, but listing texts/photos that seem to be copied from Yahoo Auction and others. Seems to be a trend. I would not give it a try as they seem very scammy…

  8. Further to others’ excellent responses, what the bloody hell kind of hostname is that?

    That alone should be a pretty strong indicator that this is totally bogus.

    It looks like it was mashed together from a word list by a script. The same gang has probably got entire legions of these websites machine generated like this.

    (Also, payment by bank transfer is a bit off these days, considering the brazillion credit card and electronic payment options that are easily available. Any money sent to them probably goes straight into the PLA’s coffers.)

  9. The domain name is registered in China, as someone else already indicated, and they’re using Cloudflare to obscure their actual IP address. Red flags all around. Just as a general precaution, never order anything from a website that doesn’t use conventional top-level domain names like .com, .net, .co.jp, .jp, etc. Domains that end in things like .top, .info, .site, etc., tend to be trouble.

  10. Oh hell yeah. I buy everything from [societycarpet.top](https://societycarpet.top)! Why wouldn’t you? Its a totally legitimate sounding site that makes tons of sense as a name! I enjoy the extremely fast shipping times that come from shipping on top of the carpet of society! (Aladdin has got nothing on this speed)

    ^(ifyou havent realized this is /s yet…)

  11. You think “nalli society carpet” sounds like a reputable, legit website??

  12. Even if you don’t speak Japanese, the fact that the website name (“Herakles”) doesn’t match *any part* of the domain name (“nalli.societycarpet.top”) is a red flag in and of itself.

Leave a Reply
You May Also Like