security GoDaddy scam e-mail?

Did you look in the envelope to see where the email had come from?

Kuffy said:

Did you look in the envelope to see where the email had come from?

Click to expand...

What is ''envelope''?

The "envelope" is the wrapper round the message that contains lots of information. The address ( including IP ) that sent the mail, the return address, where it went and how it got there. and loads of other stuff. It would probably be useful to have a list of utilities for checking and controlling spam and messages that appear to be spam.

I've just registered Vet Spam.com , and if I get a chance, I'll put some info and examples on the site. Here is a mail address that I will analyse to see what spam comes from the mail harvesters that read this forum.

[email protected]

I'll use Thunderbird to handle the mail boxes.

In your case, I think it unlikely that the mail came from GD, but if you want to check, then don't click on the email address, they may be trying to get your password etc. Enter the GoDaddy url into your browser, and have a look at your GD account. It would be best to do this on a second machine in case you have a trojan on that one.

I found an old thread by @biggie in which he was reporting the same e-mail address.
The old thread is here

kite26 said:

Hello NP community. Yesterday, i got an e-mail which was stating that it was sent by Godaddy. I didn't open any link, because i want to ask you first. I believe that is scam e-mail and i moved it to my junk folder.
The sender's e-mail was [email protected], i have not seen again this e-mail address.It was asking to update my details because ICANN requires it.Strangely, it was including my name and my GD customer number. Do you know what it's going on?

Click to expand...

yes i just received like this message from [email protected] and i just clicked nothing update, i dont know whether its scam or not..?

jagankvel said:

yes i just received like this message from [email protected] and i just clicked nothing update, i dont know whether its scam or not..?

Click to expand...

I think that it is suspicious at least, so i don't recommend to click any link.

kite26 said:

I think that it is suspicious at least, so i don't recommend to click any link.

Click to expand...

yearly twice i received like this message,

You should never click on links in emails. If you want to go to the site, cut and paste the link into your browser.

Now you know this e-mail. Take care all and report these e-mails.

I also received it, the email clearly states my name, customer number and it's signed by GoDaddy so I don't think it's a scam.

cloudguy said:

I also received it, the email clearly states my name, customer number and it's signed by GoDaddy so I don't think it's a scam.

Click to expand...

Yes, it is the reason i created this thread. We need someone to clarify it and be sure 100%.

cloudguy said:

I also received it, the email clearly states my name, customer number and it's signed by GoDaddy so I don't think it's a scam.

Click to expand...

i have copied that link and verified its directly redirected to godaddy accounts page, so no worry about that.

jagankvel said:

i have copied that link and verified its directly redirected to godaddy accounts page, so no worry about that.

Click to expand...

Are you sure it isn't a cloned page. This is a fairly old scam to steal names. Have you checked the IP of the target page?

If you forward the mail to [email protected] I'll check the envelope and addresses. I've only just set up that box, but it should be working. if the dns is resolving.

i didnt check ip address, lets wait others suggestion,

Yesterday I received a similar email for a domain registered with Uniregistry.
I didn't click any links but opening up the source I verified that all links included in the email directed to godaddy (I achieved that by copy/pasting the full domain names, ie. including the subdomains but without anything after the slash '/')

What I did after was to contact the support at Uni and requested their opinion which was to just ignore the email since -the email- wasn't a result from some action I did nor I expected one from GoDaddy for my domain.

I have absolutely no idea what the senders' gain is by sending those emails. It's definitely fishy but what is the purpose? Do they check if the email behind the domain is 'alive' maybe?

Here is an example of a spam item from one of the seo spammers. It's in text form, so the message won't display as intended, but it shows the details of the sender.

http://vetspam.com/examples/seospam.txt

cloudguy said:

I also received it, the email clearly states my name, customer number and it's signed by GoDaddy so I don't think it's a scam.

Click to expand...

I recived one as well with name and customer number and I think it`s legit - Maybe @joe styler can corfirm it?

wwwulff said:

I recived one as well with name and customer number and I think it`s legit - Maybe @joestyler can corfirm it?

Click to expand...

It would be the best. It includes customer number, the name, and the domain names, but it looks so....spammy.

kite26 said:

It would be the best. It includes customer number, the name, and the domain names, but it looks so....spammy.

Click to expand...

I have previously received spam mail which pretended that they came from GD, but never some with both my name and customer number in it.

wwwulff said:

I have previously received spam mail which pretended that they came from GD, but never some with both my name and customer number in it.

Click to expand...

Exactly. Same to me too. That's the reason of this thread.

So has anybody checked the source domain in the envelope yet?

@Kuffy So i just received an email from GD with the title: Re-Verify Your Premium Account

Sender says [email protected] but the email just didn't feel right. Looked at the source of the email (not a pro in these things at all) and it says in two places, envelope-sender, x-sender, that the sender is [email protected] which seems to belong to some entity with arabic name.

That sounds like a simple spoofed email.