Dynadot โ€” .com Registration $8.99

New Enom phishing E-mail - beware !

Spaceship Spaceship
Watch

Kate

Domainosaurus RexTop Member
Impact
21,828
Just received this:
Dear eNomCentral Customer,

ICANN, the organization responsible for the stability of the Internet, requires that each domain name registrant be given the opportunity to correct any inaccurate contact data (WHOIS data) associated with a domain name registration.
Please login to your account.If any of the information above is inaccurate, you should correct it.

https://www.enomcentral.com/Login.asp?

Please remember that under the terms of your registration agreement, the provision of false WHOIS information can be grounds for cancellation of your domain name registration.


*********************************************************

Sincerely,eNomCentral Account Review Department

It's a fake, the URL points to:
emomcemtral.com/Login.asp.htm


Full E-mail with headers:
Code:
From - Fri Jul 11 18:20:37 2008
X-UIDL: UID193488-1156968009
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Received: (qmail 26220 invoked by uid 110); 11 Jul 2008 19:11:14 +0300
Delivered-To: ....................................
Received: (qmail 26205 invoked from network); 11 Jul 2008 19:11:14 +0300
Received: from qmta04.westchester.pa.mail.comcast.net (76.96.62.40)
  by 77.235.38.1 with SMTP; 11 Jul 2008 19:11:14 +0300
Received-SPF: none (77.235.38.1: domain at enomcentral.com does not designate permitted sender hosts)
Received: from OMTA10.westchester.pa.mail.comcast.net ([76.96.62.28])
	by QMTA04.westchester.pa.mail.comcast.net with comcast
	id ocox1Z00C0cZkys54gBDbv; Fri, 11 Jul 2008 16:11:13 +0000
Received: from User ([58.56.87.2])
	by OMTA10.westchester.pa.mail.comcast.net with comcast
	id og8T1Z00Z031oTe3Wg8jhN; Fri, 11 Jul 2008 16:10:49 +0000
X-Authority-Analysis: v=1.0 c=1 a=KN9KvRDPAAAA:8 a=adwD-PbAAAAA:8
 a=umc0c-l1agoDVe1FYXkA:9 a=4zHjdy3aBBFIZ6-zyboA:7
 a=BUvd0x9xuP2KcHZBbjgyZhudhdEA:4 a=37WNUvjkh6kA:10
From: "eNomCentral"<[email protected]>
Subject: Important account information
Date: Fri, 11 Jul 2008 19:10:40 +0300
MIME-Version: 1.0
Content-Type: text/html;
	charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Checker-Version: SpamAssassin 3.0.5 (2005-11-28) on mars.parknames.net
X-Spam-Level: ****
X-Spam-Status: No, score=4.5 required=7.0 tests=BAYES_20,FORGED_MUA_OUTLOOK,
	FORGED_OUTLOOK_HTML,FORGED_OUTLOOK_TAGS,HTML_20_30,HTML_MESSAGE,
	MIME_HTML_ONLY,MISSING_HEADERS,NO_REAL_NAME,RCVD_BY_IP,
	RCVD_IN_BL_SPAMCOP_NET autolearn=no version=3.0.5

<html>
Dear eNomCentral Customer,<br><br>

ICANN, the organization responsible for the stability of the Internet, requires that each domain name registrant be given the opportunity to correct any inaccurate contact data (WHOIS data) associated with a domain name registration.<br>

Please login to your account.If any of the information above is inaccurate, you should correct it.<br><br>


<a rel="nofollow" target="_blank" href="http://www.emomcemtral.com/Login.asp.htm"><span class="yshortcuts" id="lw_1214812972_0">https://www.enomcentral.com/Login.asp?</span></a><br><br>

<b>Please remember that under the terms of your registration agreement, the provision of false WHOIS information can be grounds for cancellation of your domain name registration.</b><br><br><br>


*********************************************************<br><br>
Sincerely,eNomCentral Account Review Department

<html>
 
0
•••
The views expressed on this page by users and staff are their own, not those of NamePros.
.US domains.US domains
Thanks for the heads up Kate, I was about to post this,
I just got one also :)

It went straight to my junk folder, which regular
enom emails don't.
 
0
•••
Thanks for the heads up, it looks like they already took the website down. :kickass:

-Bill
 
0
•••
Wow thanks for posting, th is will help to avoid future phishing / scam attempts like this
 
0
•••
i reported it to spamcop, it's already blocked as well on cbl.abuseat.org

Using postmaster#[email protected] for statistical tracking.
Sorry, this email is too old to file a spam report. You must report spam within 2 days of receipt. This mail was received on 11 Jul 2008 19:11:14 +0300
Message is 5.5 days old
58.56.87.2 not listed in dnsbl.njabl.org
58.56.87.2 not listed in dnsbl.njabl.org
58.56.87.2 listed in cbl.abuseat.org ( 127.0.0.2 )
58.56.87.2 is an open proxy
58.56.87.2 not listed in accredit.habeas.com
58.56.87.2 not listed in plus.bondedsender.org
58.56.87.2 not listed in iadb.isipp.com
 
0
•••
Unstoppable Domains
Domain Recover
NameMaxi - Your Domain Has Buyers
  • The sidebar remains visible by scrolling at a speed relative to the pageโ€™s height.
Back