Thai NCSA shuts down dtv.in.th and eta.in.th websites

[bwr5113]

A few days ago, Thailand's National Cyber Security Agency acted on multiple reports and shut down the phishing websites:

 

• eta.in.th -- ETA arrival card website
• dtv.in.th -- DTV digital nomad visa website
• asq.in.th -- ASQ quarantine website

 

These sites were designed in a way to appear as official resources, but were privately owned, and were created by an American expat living in Bangkok. The NCSA forced him and his Thai wife (who's name is on the WHOIS registration) to redirect the domains to non-3 letter domains and stop using the .th domain anymore (they now redirect to eta42.com, dtv42.com, and asq42.com).

 

They also forced them to put visible warnings at the top of each of these websites to warn visitors that these are not official Thai government resources, or risk further legal trouble.

 

[Ralf001]

 

[bwr5113]

@Ralf001 I'm not sure why "Thai Visa Centre" is responding, are they involved with these websites?

 

In any case, it would seem the National Cyber Security Agency disagrees with their claims, as they shut down the phishing sites.

[proton]

5 minutes ago, bwr5113 said:

@Ralf001 I'm not sure why "Thai Visa Centre" is responding, are they involved with these websites?

 

In any case, it would seem the National Cyber Security Agency disagrees with their claims, as they shut down the phishing sites.

 

I wonder how Thai visa centre gets hold of your email address? I got an offer from them some years ago when I had not previously contacted them, or any other agents.

[treetops]

8 hours ago, bwr5113 said:

@Ralf001 I'm not sure why "Thai Visa Centre" is responding, are they involved with these websites?

 

In any case, it would seem the National Cyber Security Agency disagrees with their claims, as they shut down the phishing sites.

 

Thai Visa Center own the sites as they confirm in this thread:

 

https://aseannow.com/topic/1344826-the-thai-eta-electronic-system-for-travel-authorisation/

 

There were some posts on here about them being phishing sites and Malwarebytes highlighting them but the thread seems to have been removed.

[Patong2021]

9 hours ago, bwr5113 said:

A few days ago, Thailand's National Cyber Security Agency acted on multiple reports and shut down the phishing websites:

 

• eta.in.th -- ETA arrival card website
• dtv.in.th -- DTV digital nomad visa website
• asq.in.th -- ASQ quarantine website

 

These sites were designed in a way to appear as official resources, but were privately owned, and were created by an American expat living in Bangkok. The NCSA forced him and his Thai wife (who's name is on the WHOIS registration) to redirect the domains to non-3 letter domains and stop using the .th domain anymore (they now redirect to eta42.com, dtv42.com, and asq42.com).

 

They also forced them to put visible warnings at the top of each of these websites to warn visitors that these are not official Thai government resources, or risk further legal trouble.

 

 

They are not shut down and are still operating.

[treetops]

7 minutes ago, Patong2021 said:

They are not shut down and are still operating.

 

They automatically redirect to the new named pages mentioned in the OP.

[Patong2021]

41 minutes ago, treetops said:

 

They automatically redirect to the new named pages mentioned in the OP.

 

I stand corrected.  

[ThaiVisaCentre]

We redirected these domains due to a false report submitted by the OP to Malwarebytes.

This post is false and defamatory.

 

We were not forced to make any changes or redirects. Our team was initially confused by the situation, but after investigating, we found that the OP had submitted false malware reports. They later used these approvals, which have since been reversed by Malwarebytes, as justification for their claims, as detailed here.

 

The original false report claimed that our domains were misleading due to the .in.th extensions, which is untrue. We have already resolved this issue with the domain provider and may restore the original domains. However, we still own these domains, and the 42.com extension is part of a broader set of information tools we manage, such as img42.com.

 

None of our domains have been shut down. This post is entirely false and defamatory by the same person who has been posting multiple topics about our services, and domains. We have already filed a police report in 2024 based on their harassment, and now they have escalated to the point of submitting false malware reports, and falsely submitting reports to government authorities.