Fake ICANN Email looks like it comes from GoDaddy

[biggie]

just received today!!

Important ICANN Notice Regarding Your Domain Name(s)Back to MessagesFrom: [email protected] View Contact
Add to Address Book | Block SenderFull HeaderReply To:
To:me:
Bcc:
Sent: Sun, Apr 18, 2010 02:38 PMDownload All | ****************************** ***********
Important ICANN Notice Regarding Your Domain Name(s)
****************************** ***********

Dear User,

it is that time of year again. ICANN(the Internet Corporation for Assigned Names and Numbers) annually requires that all accredited registrars (like GoDaddy.com) ask their domain administrators/registrants to review domain name contact data, and make any changes necessary to ensure accuracy. According to our records you are the ADMINISTRATIVE CONTACT for one or more domains registered at GoDaddy.com, Inc. as of Apr 1st, 2010.

To review/update your Account data, simply:
+ Login to https://dcc.godaddy.com/ default.aspx?isc=ICANN0908a& amp;ci=8987
(note <<fake link above goes to dcc.godalddy.com, even though it may show 'godaddy' here)
+ You will be taken to a landing page and asked to enter your account information
Please take a look that your account and domain information is up to date.

If, however, your domain contact information is inaccurate, you must correct it. (Under ICANN rules and the terms of your registration agreement, providing false contact information can be grounds for domain name cancellation.) To review the ICANN policy, visit:ICANN - Internet Corporation for Assigned Names and Numbers whois/wdrp-registrant-faq.htm

Should you have any questions, please email us at [email protected] or call our customer support line at (480) 505-8877.

Thanks for your attention and thank you for being a GoDaddy.com, Inc. customer.

Sincerely,
GoDaddy.com, Inc. Domain Support


If you are the domain administrator of more than one GoDaddy.com domain account, you may receive this notice multiple times.
------------------------------ ------------------------------ ------------------------------ ---
Copyright (c) 2008 GoDaddy.com, Inc. All rights reserved.






also using godaiddly.com in these phishing emails

domain was regged today

 

[TestCase]

THANKS for the info!!!

 

[rocknrollo]

There is just no end to the scams out there.

 

[HostMantis]

Have you forwarded it to Godaddy's abuse department?

 

[Eguru]

sweet info, thanks!

 

[Bannen]

+ Login to https://dcc.godaddy.com/ default.aspx?isc=ICANN0908a& amp;ci=8987
(note <<fake link above goes to dcc.godalddy.com, even though it may show 'godaddy' here)

For me, the link works properly... goes to dcc.godaddy.com, not godalddy...
And godalddy.com is showing as still available to register...

also using godaiddly.com in these phishing emails

domain was regged today

I'm showing it as still available to register... (I checked at Godaddy, ha ha)

How can you tell it's phishing? I must be missing something, because I show both those domains (godaiddly.com and godalddy.com) as available to reg, and your above link takes me to the correct site and not a fake... someone fill me in?

----- Unless it was all done for just one day: did they reg those names, set up the Phish to grab a few quick passwords, and then drop those domains?

 

[moneyman910]

just received today!!

Important ICANN Notice Regarding Your Domain Name(s)Back to MessagesFrom: [email protected] View Contact
Add to Address Book | Block SenderFull HeaderReply To:
To:me:
Bcc:
Sent: Sun, Apr 18, 2010 02:38 PMDownload All | ****************************** ***********
Important ICANN Notice Regarding Your Domain Name(s)
****************************** ***********

Dear User,

it is that time of year again. ICANN(the Internet Corporation for Assigned Names and Numbers) annually requires that all accredited registrars (like GoDaddy.com) ask their domain administrators/registrants to review domain name contact data, and make any changes necessary to ensure accuracy. According to our records you are the ADMINISTRATIVE CONTACT for one or more domains registered at GoDaddy.com, Inc. as of Apr 1st, 2010.

To review/update your Account data, simply:
+ Login to https://dcc.godaddy.com/ default.aspx?isc=ICANN0908a& amp;ci=8987
(note <<fake link above goes to dcc.godalddy.com, even though it may show 'godaddy' here)
+ You will be taken to a landing page and asked to enter your account information
Please take a look that your account and domain information is up to date.

If, however, your domain contact information is inaccurate, you must correct it. (Under ICANN rules and the terms of your registration agreement, providing false contact information can be grounds for domain name cancellation.) To review the ICANN policy, visit:ICANN - Internet Corporation for Assigned Names and Numbers whois/wdrp-registrant-faq.htm

Should you have any questions, please email us at [email protected] or call our customer support line at (480) 505-8877.

Thanks for your attention and thank you for being a GoDaddy.com, Inc. customer.

Sincerely,
GoDaddy.com, Inc. Domain Support


If you are the domain administrator of more than one GoDaddy.com domain account, you may receive this notice multiple times.
------------------------------ ------------------------------ ------------------------------ ---
Copyright (c) 2008 GoDaddy.com, Inc. All rights reserved.






also using godaiddly.com in these phishing emails

domain was regged today

Yes. This Email is fake. i have also got same email few months back with misleading Link which takes me to another domain which landing page resembles Godaddy. Do not enter any info on these misleading domains.

 

[biggie]

For me, the link works properly... goes to dcc.godaddy.com, not godalddy...
And godalddy.com is showing as still available to register...



I'm showing it as still available to register... (I checked at Godaddy, ha ha)

How can you tell it's phishing? I must be missing something, because I show both those domains (godaiddly.com and godalddy.com) as available to reg, and your above link takes me to the correct site and not a fake... someone fill me in?

----- Unless it was all done for just one day: did they reg those names, set up the Phish to grab a few quick passwords, and then drop those domains?

Hi

Godaddy is NOT a real-time registrar, so it is not reliable for checking domain availability.

imo...

although the registrant indeed may have dropped the domain, as i did report it to GD the same day of receipt.