 | | |||||
Welcome, Guest! Ready to make a name for yourself in the domain business? We welcome both the hobbyist and professional domainer to join the discussion as part of the NamePros community.
Click here to create your profile to start earning reputation for posting, and trader ratings for buying & selling in our free e-marketplace. Build your trader rating with each successful sale. Our system has tracked over 100,000 sales and counting!
Click here to create your profile to start earning reputation for posting, and trader ratings for buying & selling in our free e-marketplace. Build your trader rating with each successful sale. Our system has tracked over 100,000 sales and counting!
| ||||||||
| Warnings & Alerts Report and discuss scams, stolen domains, and bad people or companies to deal with. |
 |
| | LinkBack | Thread Tools |
01-31-2009, 02:37 PM
| THREAD STARTER #1 (permalink) |
| NamePros Regular  Join Date: Jan 2007
Posts: 335
   | GoDaddy Phishing email Below are the raw message contents: X-Eon-Dm: dm42 Return-Path: <nobody@server.vipreseller5.net> Received: from server.vipreseller5.net (70.86.255.130 [70.86.255.130]) by dm42.mta.everyone.net (EON-INBOUND) with ESMTP id dm42.4981cd42.55ccbf for <admin@XXXX.com>; Sat, 31 Jan 2009 14:21:29 -0800 Received: from nobody by server.vipreseller5.net with local (Exim 4.69) (envelope-from <nobody@server.vipreseller5.net>) id 1LTOBo-0007K5-W3 for admin@XXXX.com; Sat, 31 Jan 2009 20:19:48 -0200 Date: Sat, 31 Jan 2009 20:19:48 -0200 To: admin@XXXX.com From: support@godaddy.com Reply-To: Subject: Go Daddy - Domain Security Update Message-ID: <751831b5197c4558e36aa051706da3ff@www.maepobre.org .br> X-Priority: 1 ????: NamePros.com http://www.namepros.com/warnings-and-alerts/555616-godaddy-phishing-email.html X-Mailer: PHPMailer (phpmailer.sourceforge.net) [version ] MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Content-Type: text/html; charset="iso-8859-1" Sender: Nobody <nobody@server.vipreseller5.net> X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - server.vipreseller5.net X-AntiAbuse: Original Domain - XXXX.com X-AntiAbuse: Originator/Caller UID/GID - [99 500] / [47 12] X-AntiAbuse: Sender Address Domain - server.vipreseller5.net X-Source: X-Source-Args: /usr/local/apache/bin/httpd -DSSL X-Source-Dir: maepobre.org.br:/public_html/fotos/albums/userpics <head> <style type="text/css"> .style1 { text-decoration: underline; } </style> </head> <p> <img alt="" src="http://imagesak.godaddy.com/fos/log/1/log_hdr_gd.png" width="124" height="71"></p> <p>�</p> <p><span class="style1">Dear : Go Daddy Customer</span><br> <br> We recently have determined that different computers have logged into your<br> Go Daddy account, and multiple password failures were present before the logons.<br> We now need you to log into your account and verify your account activity.<br> count we have issued this warning message.<br> <br> It has come to our attention that your Go Daddy account information needs to be <br> reactivated as part of our continuing commitment to protect your account and to <br> reduce the instance of fraud on our website in this new Season.<br> Once you have reactivated your account records your Go Daddy account<br> service will not be interrupted and will continue as normal. <br> <br> To reactivate your Go Daddy Account click on the following link: <br> <a href="http://dcc.godaddy.com.6020605040605040201060200406050406 0406546465465465465749879465.rsbinvestments.net/login.idp.godaddy.com/login.idp.godaddy.com/login.aspxSPKey=/login.aspxSPKey=GDDCCEB05&myaUrl=fdefault.aspxci=8 987/login.aspxSPKey=update/goddady-update/index.php"> reactivate your Go Daddy Account</a><br> <br> Thank You</p> |
|  |
|
01-31-2009, 04:00 PM
| #4 (permalink) |
| NamePros Expert  Join Date: Sep 2006 Location: Carlsbad, CA
Posts: 7,848
     | The ironic thing is I never even look at my GD emails. Too many of em - I ususally check the domains daily anyhow.
__________________ Read my Blog! NameBio.com - Search The Domain Sales Index Buying LLLL.com's ending in "CA" |
|
| |
.... was lucky and reset it. |
01-31-2009, 10:02 PM
| #6 (permalink) | ||||||||
| Extension Agnostic   Join Date: Jan 2007 Location: Mumbai, India
Posts: 7,918
         | http://whois.domaintools.com/rsbinvestments.net
__________________ | ||||||||
| |
|
01-31-2009, 10:04 PM
| #7 (permalink) | ||||
| NamePros Regular  Join Date: Jul 2007 Location: New Delhi, India.
Posts: 864
     |
__________________ LLPH.com | 8T3.com | PDE.in | CGP.in | ||||
|
| |
|
02-01-2009, 08:31 PM
| #9 (permalink) |
| NamePros Regular  Join Date: Jun 2007
Posts: 330
| Once again, never click a link in an email !!!! Go directly to the site via address bar or google it... Or if says it is important, call them, do not use links in email .... Safety first , scammers can go to hell
__________________ The dogs are barking merrily as Jerry sits on high. If you studied your Floyd properly, you'd know that pigs could fly. -"You're the guy from the Hamburger Train? Right?" |
|
| |
