I stopped receiving them altogether a few years after I made my domain name registrations private.
I keep my registrations public, as they should be. But I stopped getting those letters when I changed the phone number to a VOIP service in another country.
> They look very legitimate...
The ones I've seen do not. And I stopped receiving them altogether a few years after I made my domain name registrations private.