legal more godaddy phishing emails

[Biggie]

beware!!

important icann update emails go to:

www.dcc.gobdaddy.com


coming from:
<[email protected]>

 

[A D]

Forward all phishing emails to [email protected]

-=DCG=-

 

[Biggie]

watch out


more fake ICANN godaddy emails


this one came from "godldaddly.com"

received 1/23/11

 

[A D]

I got that one yesterday, I forward them all to [email protected]

... but the thieves never stop trying.

-=DCG=-

 

[Biggie]

I got that one yesterday, I forward them all to [email protected]

... but the thieves never stop trying.

-=DCG=-

i suspect it is same person/entity

 

[Tom K.]

Just got one that points to

goldadidy.com/dcc/login.aspxSPKey=GDDCCEB07myaUrl=3fdefaultaspxisc=ICANN0908aci=8987/

Forwarded it to [email protected]

Watch out, the landing page looks awfully legit.

 

[draggar]

Me too. I forwarded it to that email address.

Edit: I edited your post so it's unclickable and doesn't help their SEO.

 

[jaydub]

got it as well...called gd to let them know.

whois shows
Domain Name.......... goldadidy.com
Creation Date........ 2011-02-21
Registration Date.... 2011-02-21
Expiry Date.......... 2012-02-21
Organisation Name.... Joe Walters
Organisation Address. 1221 Southwest 10th avenue #802
Organisation Address.
Organisation Address. Portland
Organisation Address. 97205
Organisation Address. OR
Organisation Address. UNITED STATES

Admin Name........... Joe Walters
Admin Address........ 1221 Southwest 10th avenue #802
Admin Address........
Admin Address........ Portland
Admin Address........ 97205
Admin Address........ OR
Admin Address........ UNITED STATES
Admin Email.......... omid.hamid at rocketmail.com
Admin Phone.......... +1.5032065682
Admin Fax............

Tech Name............ YahooDomains TechContact
Tech Address......... 701 First Ave.
Tech Address.........
Tech Address......... Sunnyvale
Tech Address......... 94089
Tech Address......... CA
Tech Address......... UNITED STATES
Tech Email........... domain.tech at yahoo-inc.com
Tech Phone........... +1.4089162124
Tech Fax.............
Name Server.......... ns2.reliaboxhosting.com
Name Server.......... ns3.reliaboxhosting.com
Name Server.......... ns4.reliaboxhosting.com
Name Server.......... ns1.reliaboxhosting.com

 

[Poohnix]

Just received four of them, to four different addresses, a few minutes ago...

Since I don't use GoDaddy, and they were sent to addresses used for other registrars and never used for GoDaddy, (I use separate addresses for each registrar - or for that matter for each service of any kind I use), so it wasn't hard to spot it as phishing...

 

[silentg]

I just want to give you guys heads up about a new scam from fake ICANN Whois email from GoDaddy.

goldadidy.com/dcc/login.aspxSPKey=GDDCCEB07myaUrl=3fdefaultaspxisc=ICANN0908aci=8987/

 

[Stian]

I know this has been mentioned many times before, but it can't be issued enough warnings about this imho.

I just received 3 fake ICANN whois reminder e-mails, supposedly from GoDaddy, asking me to log in to my account and check that my whois info is accurate. The links are redirecting to go ldadidy .c om (I put spaces in url so noone clicks it) instead of godaddy.com.

So a good rule of thumb is; never click any e-mail links to access your registrar, whether they are legit or not. Always log into your registrar account by typing the URL of the registrar directly into your browser.

Recently a fellow DNFer and friend had his domains stolen because he clicked a link in one of these phishing e-mails and they actually look legit, so if you have your mind somewhere else while browsing e-mails it's easy to click the link by mistake.

For reference, here's the e-mail I just received:

****************************** ***********
Important ICANN Notice Regarding Your Domain Name(s)
****************************** ***********

Dear User,

it is that time of year again. ICANN(the Internet Corporation for Assigned Names and Numbers) annually requires that all accredited registrars (like GoDaddy.com) ask their domain administrators/registrants to review domain name contact data, and make any changes necessary to ensure accuracy. According to our records you are the ADMINISTRATIVE CONTACT for one or more domains registered at GoDaddy.com, Inc. as of Jan 1st, 2011.

To review/update your Account data, simply:
+ Login to https://dcc.godaddy.com/ default.aspx?isc=ICANN0908a& amp;ci=8987
+ You will be taken to a landing page and asked to enter your account information
Please take a look that your account and domain information is up to date.

If, however, your domain contact information is inaccurate, you must correct it. (Under ICANN rules and the terms of your registration agreement, providing false contact information can be grounds for domain name cancellation.) To review the ICANN policy, visit:http://www.icann.org/ whois/wdrp-registrant-faq.htm

Should you have any questions, please email us at [email protected] or call our customer support line at (480) 505-8877.

Thanks for your attention and thank you for being a GoDaddy.com, Inc. customer.

Sincerely,
GoDaddy.com, Inc. Domain Support


If you are the domain administrator of more than one GoDaddy.com domain account, you may receive this notice multiple times.
------------------------------ ------------------------------ ------------------------------ ---
Copyright (c) 2008 GoDaddy.com, Inc. All rights reserved.

* The correct URL is showing in the quote. The e-mails are in HTML so the actual (fake) URL is only showing when you hover the mouse over the link. If you disable HTML in your e-mail client you will see that these links actually show something like <a href="http://www.fakegodaddyshit.com/fake_scam_phish.php">http://www.godaddy.com/real_page_link.html</a>

 

[silentg]

Forward the emails to abuse @ GoDaddy.com

 

[Gerry]

This is going to be a major disaster.

The emails have been pouring in the past few days.

The link takes you to GOLDADDY.COM.

This is very, very bad and look for theft cases to skyrocket.

---------- Post added at 01:19 PM ---------- Previous post was at 01:17 PM ----------

Forward the emails to abuse @ GoDaddy.com

I've sent all of mine just in case there are different originating points.

 

[draggar]

Yep, a lot of us have been getting this. I can always tell these scams - they go to my gMail account (not my registrar contact email!)

---------- Post added at 01:49 PM ---------- Previous post was at 01:21 PM ----------

I've merged the 3 threads into one since it's the same thing.

 

[mvl]

[/COLOR]I've merged the 3 threads into one since it's the same thing.

Oops didn't see this thread. You might want to merge this one also: http://www.dnforum.com/f209/warning-godaddy-phishing-mails-icann-notice-thread-448105.html

 

[Gerry]

Wow, this is going to be a massive mess.

And I hope like hell none of the idiots behind this used privacy - stupid is what stupid does.

---------- Post added at 04:20 PM ---------- Previous post was at 04:13 PM ----------

got it as well...called gd to let them know.

whois shows
Domain Name.......... goldadidy.com

Just got one from this URL as well...

 

[draggar]

Another round:

from [email protected]
to (me)
date Mon, Mar 7, 2011 at 12:48 AM
subject Important ICANN Notice Regarding Your Domain Name(s)
mailed-by pro1612.040services.net
hide details 12:48 AM (4 hours ago)
****************************** ***********
Important ICANN Notice Regarding Your Domain Name(s)
****************************** ***********

Dear User,

it is that time of year again. ICANN(the Internet Corporation for Assigned Names and Numbers) annually requires that all accredited registrars (like GoDaddy.com) ask their domain administrators/registrants to review domain name contact data, and make any changes necessary to ensure accuracy. According to our records you are the ADMINISTRATIVE CONTACT for one or more domains registered at GoDaddy.com, Inc. as of Jan 1st, 2011.

To review/update your Account data, simply:
+ Login to (fake URL)
+ You will be taken to a landing page and asked to enter your account information
Please take a look that your account and domain information is up to date.

If, however, your domain contact information is inaccurate, you must correct it. (Under ICANN rules and the terms of your registration agreement, providing false contact information can be grounds for domain name cancellation.) To review the ICANN policy, visit:http://www.icann.org/ whois/wdrp-registrant-faq.htm

Should you have any questions, please email us at [email protected] or call our customer support line at (480) 505-8877.

Thanks for your attention and thank you for being a GoDaddy.com, Inc. customer.

Sincerely,
GoDaddy.com, Inc. Domain Support


If you are the domain administrator of more than one GoDaddy.com domain account, you may receive this notice multiple times.
------------------------------ ------------------------------ ------------------------------ ---
Copyright (c) 2008 GoDaddy.com, Inc. All rights reserved.

These are all coming to my gMail which is NOT my registrar contact email (just the WhoIs). I think the domain is GoliDaddy.com?

 

[jaydub]

Here we go again...golidaddy.com was reg'd today

Another round:


These are all coming to my gMail which is NOT my registrar contact email (just the WhoIs). I think the domain is GoliDaddy.com?

 

[silentg]

This time it's registered with Yahoo Domains (Reseller of MelbourneIT.com). Forward the e-mail to [email protected].

 

[draggar]

This time it's registered with Yahoo Domains (Reseller of MelbourneIT.com). Forward the e-mail to [email protected].

Email addie bounced back.

I did FWD to fraud and abuse @godaddy.com, though