New phishing e-mail. They almost got me ( from Enom ) - GoFuckYourself.com

Just Alex · 10-29-2008, 08:12 AM

Fuck, too early in the morning.. so I didn't even realize that link was pinting to bogus site .. Never seen this before, only bank, paypal, epass e-mails before. Sons of bitches.

---------------------

On Wed, 29 Oct 2008 08:06:24 -0500 we received a third party complaint of invalid domain contact information in the Whois database for this domain Whenever we receive a complaint, we are required by ICANN regulations to initiate an investigation as to whether the contact data displaying in the Whois database is valid data or not. If we find that there is invalid or missing data, we contact both the registrant and the account holder and inform them to update the information.

The contact information for the domain which displayed in the Whois database was indeed invalid. On Wed, 29 Oct 2008 08:06:24 -0500 we sent a notice to you at the admin/tech contact email address and the account email address informing you of invalid data in breach of the domain registration agreement and advising you to update the information or risk cancellation of the domain. The contact information was not updated within the specified period of time and we canceled the domain. The domain has subsequently been purchased by another party. You will need to contact them for any further inquiries regarding the domain.

PLEASE VERIFY YOUR CONTACT INFORMATION - http://www.enom.com

If you find any invalid contact information for this domain, please respond to this email with evidence of the specific contact information you have found to be invalid on the Whois record for the domain name. Examples would be a bounced email or returned postal mail. If you have a bounced email, please attach or forward with your reply or in the case of returned postal mail, scan the returned letter and attach to your email reply or please send it to:

Attn: Domain Services 14455 N Hayden Rd Suite 219 Scottsdale, AZ 85260

LINK TO CHANGE INFORMATION - http://www.enom.com

Thank you,
Domain Services

[IncidentID:04983]

jakethedog · 10-29-2008, 08:31 AM

I actually read it through a few times as well .. I am on a mac so curiously I clicked not 100% sure it wasn't a trap .. it was ... phishing site .. my stuff stopped it as usual .. but damn .. to early for me to reading it as well .. mail time said 2:00am but it didn't have a specific url ... but i was sure more curious than usual ..as well the urls links were way off .. NOT like you have up there ..

TurboAngel · 10-29-2008, 08:34 AM

Quote:

Originally Posted by jakethedog

I actually read it through a few times as well .. I am on a mac so curiously I clicked not 100% sure it wasn't a trap .. it was ... phishing site .. my stuff stopped it as usual .. but damn .. to early for me to reading it as well .. mail time said 2:00am but it didn't have a specific url ... but i was sure more curious than usual ..as well the urls links were way off .. NOT like you have up there ..

You're brave, I'm not going to click on shit.

GrouchyAdmin · 10-29-2008, 09:25 AM

I'm guessing you didn't parse the 'fake' urls. eNom is a real registrar - but the postal address is GoDaddy. God, I deal with this shit too much.

SiMpLe · 10-29-2008, 09:55 AM

I have 4 in my inbox - What do I win! lol

gleem · 10-29-2008, 10:00 AM

I was just about to put up a new thread.

Have about 40 of these and counting, they get more and more threatening too.

started with " Subject: Attention: Inaccurate whois information."

and now they are coming in as " Subject: Your domain must be deleted today!"

the ENgrish in the second subject is a dead give away..

u-Bob · 10-29-2008, 10:04 AM

been getting those as well.
were easy to spot.

kmanrox · 10-29-2008, 10:10 AM

shit! i gave them all my information

j/k

Ron Bennett · 10-29-2008, 10:25 AM

eNom phish emails have been a problem for quite some time.

That one was among the more convincing I've seen, though the phisher messed up on the date/time contained within them.

It appears that part is being dynamically generated based on the time each is sent out ... furthermore, the one you post has the timezone as -0500, but the ones I've seen were identical, but the timezone was +0300; that really made it stand out like a sore thumb.

These phishes again illustrate why email alone, without additional verification (ie. logging into one's account) can never be trusted.

Ron

Mr.Right - Banned For Life · 10-29-2008, 10:27 AM

i got it too.

at first i was trying to find the domain they were referring to.

the landing URL was a dead giveaway.

RevSand · 10-29-2008, 10:27 AM

I have gotten a TON of those in the last couple days, along with some BofA ones... The 1st time I read thru them I was kinda worried but then I checked the URLS and logged on to the REAL site for any notices.

YDG · 10-29-2008, 10:28 AM

Just got one now also.
Got me thinking I have to say...

However the url included enom.com but also sys82.biz on the end.

So was clearly another peice of crap.

Makingcoin · 10-29-2008, 11:01 AM

Getting TONS of these...

kinjo · 10-29-2008, 11:04 AM

i delete all the emails with unfamiliar content
so far so good

Phoenix · 10-29-2008, 11:12 AM

yeah i think we all got it

DirtyDanza · 10-29-2008, 11:16 AM

count me in this mix as well... who's got the list? ill buy it right now 25 bucks via epass

Just Alex · 10-29-2008, 02:20 PM

Quote:

Originally Posted by jakethedog

I actually read it through a few times as well .. I am on a mac so curiously I clicked not 100% sure it wasn't a trap .. it was ... phishing site .. my stuff stopped it as usual .. but damn .. to early for me to reading it as well .. mail time said 2:00am but it didn't have a specific url ... but i was sure more curious than usual ..as well the urls links were way off .. NOT like you have up there ..

I read it twice looking for domain name.. replied to it asking "what domains are you talking about?" and saw bodus link to some enom.s32enom.biz site after I sent the e-mail.

Rattlehead · 10-29-2008, 02:40 PM

I got that fucking email today too and almost bit. Then I remembered I transferred everything away from them years ago.

You have to always be on your toes.

baddog · 10-29-2008, 03:18 PM

These guys did not even really try to hide how fake they are:

Dear Network Solutions Customer,

We recently notified you that the registration period for your Network Solutions domain name had expired. As a benefit of having previously registered a domain name(s) with Network Solutions, you are eligible to receive a percentage of the net proceeds that were generated from the renewal and transfer of the domain name you chose not to renew. Since you have chosen not to renew the domain name listed below during the applicable grace period, we were successful in securing a backorder for this domain name on your behalf and it has been transferred to another party in accordance with the Service Agreement.

Renew your domain now - http://www.networksolutions.com.com42.asia

You must click on the following link, enter your domain name, and confirm your contact information in order to claim these funds. If your contact information is not correct, you must enter Account Manager and make the appropriate changes prior to clicking "submit" from the confirmation screen. If you do not do this, you will be confirming inaccurate information and will not receive any payment. Checks will only be made payable and mailed to the Account Holder of record.

Sincerely,

Network Solutions® Customer Support

baddog · 10-29-2008, 03:28 PM

oops . . wrong place

10-29-2008, 08:12 AM	#1
Just Alex Liv Benson to You, Bitch Industry Role: Join Date: Aug 2007 Location: Maryland and WV Posts: 6,060	New phishing e-mail. They almost got me ( from Enom ) Fuck, too early in the morning.. so I didn't even realize that link was pinting to bogus site .. Never seen this before, only bank, paypal, epass e-mails before. Sons of bitches. --------------------- On Wed, 29 Oct 2008 08:06:24 -0500 we received a third party complaint of invalid domain contact information in the Whois database for this domain Whenever we receive a complaint, we are required by ICANN regulations to initiate an investigation as to whether the contact data displaying in the Whois database is valid data or not. If we find that there is invalid or missing data, we contact both the registrant and the account holder and inform them to update the information. The contact information for the domain which displayed in the Whois database was indeed invalid. On Wed, 29 Oct 2008 08:06:24 -0500 we sent a notice to you at the admin/tech contact email address and the account email address informing you of invalid data in breach of the domain registration agreement and advising you to update the information or risk cancellation of the domain. The contact information was not updated within the specified period of time and we canceled the domain. The domain has subsequently been purchased by another party. You will need to contact them for any further inquiries regarding the domain. PLEASE VERIFY YOUR CONTACT INFORMATION - http://www.enom.com If you find any invalid contact information for this domain, please respond to this email with evidence of the specific contact information you have found to be invalid on the Whois record for the domain name. Examples would be a bounced email or returned postal mail. If you have a bounced email, please attach or forward with your reply or in the case of returned postal mail, scan the returned letter and attach to your email reply or please send it to: Attn: Domain Services 14455 N Hayden Rd Suite 219 Scottsdale, AZ 85260 LINK TO CHANGE INFORMATION - http://www.enom.com Thank you, Domain Services [IncidentID:04983] __________________

10-29-2008, 08:31 AM	#2
jakethedog Confirmed User Join Date: Jun 2004 Location: Vancouver B.C. Posts: 2,497	I actually read it through a few times as well .. I am on a mac so curiously I clicked not 100% sure it wasn't a trap .. it was ... phishing site .. my stuff stopped it as usual .. but damn .. to early for me to reading it as well .. mail time said 2:00am but it didn't have a specific url ... but i was sure more curious than usual ..as well the urls links were way off .. NOT like you have up there .. __________________ No sig .. just me Last edited by jakethedog; 10-29-2008 at 08:32 AM..

10-29-2008, 09:25 AM	#4
GrouchyAdmin Now choke yourself! Industry Role: Join Date: Apr 2006 Posts: 12,085	I'm guessing you didn't parse the 'fake' urls. eNom is a real registrar - but the postal address is GoDaddy. God, I deal with this shit too much. __________________ AIM: GrouchyGfy

10-29-2008, 09:55 AM	#5
SiMpLe Confirmed User Join Date: Feb 2002 Location: Porn Central - California Posts: 3,221	I have 4 in my inbox - What do I win! lol __________________ Sean Holland Vice President OrbitalPay / Global Electronic Technology (GET) SKYPE: iam.sean ::: sholland at orbitalpay.com 888-775-1500

10-29-2008, 10:00 AM	#6
gleem Confirmed User Industry Role: Join Date: Jun 2001 Location: Sunny Land Posts: 5,593	I was just about to put up a new thread. Have about 40 of these and counting, they get more and more threatening too. started with " Subject: Attention: Inaccurate whois information." and now they are coming in as " Subject: Your domain must be deleted today!" the ENgrish in the second subject is a dead give away.. __________________ Contact me: \\// E: webmaster /at/ unprofessional.com

10-29-2008, 10:04 AM	#7
u-Bob there's no $$$ in porn Industry Role: Join Date: Jul 2005 Location: icq: 195./568.-230 (btw: not getting offline msgs) Posts: 33,063	been getting those as well. were easy to spot.

10-29-2008, 10:10 AM	#8
kmanrox aka K-Man Industry Role: Join Date: Oct 2001 Location: The Gutter Posts: 29,290	shit! i gave them all my information j/k __________________ Crypto HODLr Crypto mining Angel investor

10-29-2008, 10:25 AM	#9
Ron Bennett Confirmed User Join Date: Oct 2003 Posts: 1,653	eNom phish emails have been a problem for quite some time. That one was among the more convincing I've seen, though the phisher messed up on the date/time contained within them. It appears that part is being dynamically generated based on the time each is sent out ... furthermore, the one you post has the timezone as -0500, but the ones I've seen were identical, but the timezone was +0300; that really made it stand out like a sore thumb. These phishes again illustrate why email alone, without additional verification (ie. logging into one's account) can never be trusted. Ron __________________ Domagon - Website Management and Domain Name Sales

10-29-2008, 10:27 AM	#10
Mr.Right - Banned For Life I guarantee it Join Date: May 2005 Posts: 18,314	i got it too. at first i was trying to find the domain they were referring to. the landing URL was a dead giveaway.

10-29-2008, 10:27 AM	#11
RevSand Confirmed User Industry Role: Join Date: Oct 2003 Location: Porn Valley Posts: 8,151	I have gotten a TON of those in the last couple days, along with some BofA ones... The 1st time I read thru them I was kinda worried but then I checked the URLS and logged on to the REAL site for any notices. __________________ BadBitchesGoodWeed Hire me for all your video shooting needs!! Skype = RevSandx

10-29-2008, 10:28 AM	#12
YDG Confirmed User Industry Role: Join Date: Nov 2001 Location: The Dordogne Posts: 1,614	Just got one now also. Got me thinking I have to say... However the url included enom.com but also sys82.biz on the end. So was clearly another peice of crap. __________________ Promote the webs Highest Rated Teen Paysite TeenDreams.com. #1 Teen Paysite at almost every review site on the internet. Over 4,500 FHG's and 100's of Hosted Flash Movies and FLV dump Tool.

10-29-2008, 11:01 AM	#13
Makingcoin Confirmed User Join Date: Aug 2002 Location: The Ditch Posts: 8,919	Getting TONS of these... __________________ www.MAKINGCOIN.com icq. 166-662-831 "Start making large coin!" Daddy I Get Paid To Be A Whore - Coming Soon

10-29-2008, 11:04 AM	#14
kinjo Confirmed User Join Date: Apr 2005 Posts: 1,891	i delete all the emails with unfamiliar content so far so good __________________ i dont need a signature

10-29-2008, 11:12 AM	#15
Phoenix BACON BACON BACON Industry Role: Join Date: Nov 2002 Location: Poems everybody, the laddie fancies himself a poet Posts: 35,457	yeah i think we all got it __________________ Skype Phoenixskype1 Telegram PhoenixBrad https://quantads.io

10-29-2008, 11:16 AM	#16
DirtyDanza Confirmed User Industry Role: Join Date: Aug 2002 Location: BP4L.... Las Vegas, Posts: 8,369	count me in this mix as well... who's got the list? ill buy it right now 25 bucks via epass __________________ AVN Nominated Camming Couple

10-29-2008, 02:40 PM	#18
Rattlehead Confirmed User Industry Role: Join Date: Mar 2003 Location: Hades Posts: 744	I got that fucking email today too and almost bit. Then I remembered I transferred everything away from them years ago. You have to always be on your toes. __________________ Wifey Cash - Official Program For Wifey's World

10-29-2008, 03:18 PM	#19
baddog So Fucking Banned Industry Role: Join Date: Apr 2001 Location: the beach, SoCal Posts: 107,089	These guys did not even really try to hide how fake they are: Dear Network Solutions Customer, We recently notified you that the registration period for your Network Solutions domain name had expired. As a benefit of having previously registered a domain name(s) with Network Solutions, you are eligible to receive a percentage of the net proceeds that were generated from the renewal and transfer of the domain name you chose not to renew. Since you have chosen not to renew the domain name listed below during the applicable grace period, we were successful in securing a backorder for this domain name on your behalf and it has been transferred to another party in accordance with the Service Agreement. Renew your domain now - http://www.networksolutions.com.com42.asia You must click on the following link, enter your domain name, and confirm your contact information in order to claim these funds. If your contact information is not correct, you must enter Account Manager and make the appropriate changes prior to clicking "submit" from the confirmation screen. If you do not do this, you will be confirming inaccurate information and will not receive any payment. Checks will only be made payable and mailed to the Account Holder of record. Sincerely, Network Solutions® Customer Support

10-29-2008, 03:28 PM	#20
baddog So Fucking Banned Industry Role: Join Date: Apr 2001 Location: the beach, SoCal Posts: 107,089	How many GFyer's does it take to change a lightbulb? oops . . wrong place Last edited by baddog; 10-29-2008 at 03:31 PM..