CAREFUL! eNom phishing email on the loose!

[Theo]

I received an email from "enomcentral" requesting me to login in order to verify the WHOIS info of my domains "per ICANN" regulations. The email points to:

en0mcentral.com (that's a zero!)

The domain is hosted with Yahoo.

 

[Biggie]

yeah


i just got one and deleted it

 

[copper]

Me too.
I never click on link within email anyway.
If I want to see the site, I copy the link and paste
it to notepad and check the url first

 

[Theo]

Just spoke with an eNom person at their abuse dpt and they are aware of it.

 

[acronym007]

Great catch! I just deleted that one myself.

 

[Theo]

Looks like email was sent from [FONT=Arial, Helvetica]213.232.95.73
It appears to be a compromised machine. The domain it hosts is hcd.homecare-direct.co.uk
Would someone in the UK inform homecare-direct.co.uk that their box/mailserver is hijacked?
[/FONT]

 

[PRED]

yep, just got the email and deleted before saw post. cheers for heads up anyway Acro :yes:

 

[tekz999]

Thanks for the heads up!

 

[draggar]

The sad part is that most likely they already have a few dozen login and passwords.

 

[GAMEFINEST]

Does it say


Dear ( USERNAME)

some people do fall for that

 

[Devil Dog]

Damn, why don't I ever get these kinds of emails?

 

[Theo]

If you visited that page and you were already logged in to your eNom account, change your password. Some scripts are able to steal such login information.

 

[wikes82]

when eNom sends e-mail to verify whois information, you don't need to enter your enom login information. I had few of those e-mail asked me to verify whois, and the site to verify enom whois is http://wdrp.name-services.com/
not in enomcentral.com or enom.com

 

[DomainName]

Thank you Acro for the info! Just received the e-mail.

 

[VTEC]

thx Acro ! were there any fake DNF emails sent to anyone in the past ?

 

[JB7]

...

 

[tinner666]

Got one from GD. I copied the ICANN #, logged out and closed the browser. Shortly thereafter, I reopened a browser and logged in normally and pasted the # in the ICANN box. Paranoid here!

 

[Focus]

I only direct navigate to login to sites...don't click on any links!

 

[DomainName]

Another Fake enom e-mail is on the loose. Be on the look out!!!! Just received it.

 

[Theo]

Correct, already posted here.
These bastards don't give up.