Welcome to Welcome to DNF.com™ - Domain Sales, Domain Forum, Domain Appraisals, Domain Registrars

If you are new to domains and looking to buy, sell and learn about domains then you have come to the right place. DNForum is the largest domain name community on the internet and continues to grow every day. There are over 105,000 domainers on DNForum doing everything from buying domains, selling domains, learning about domains and discussing domains. Take a minute and Register.

Register Today on DNForum IT'S FREE!

Page 1 of 2 1 2 LastLast
Results 1 to 20 of 23

Thread: CAUTION! GoDaddy phishing happening right now

  1. #1
    Bloody Hell
    Acro's Avatar
    Join Date
    Feb 2004
    Location
    USA
    Posts
    28,132
    Country

    Holy See
    DNF$
    15,334
    Bank
    0
    Total DNF$
    15,334
    Donate  

    Exclamation CAUTION! GoDaddy phishing happening right now

    The following email appears to come from support@godaddy.com but it points to:
    http://205.234.236.23/~ytrindic/

    It's a server in Pakistan mzwebhost.com. Contacting their upstream provider.

    +++++++++++


    Dear Customer,

    This notification is generated automatically as a service to you.

    Because of unusual number of invalid login attempts on you account, we had to believe that, their might be some security problem on you account. So we have decided to put an extra verification process to ensure your identity and your account security.
    Please click on sign in to domain servers to continue to the verification process and ensure your account security. It is all about your security. Thank you. and visit the customer service section.

    please contact us within 1 days.

    If you need to address this matter, or in any way need further assistance or technical support, call us any time at (480) 505-8877 or email us at support@godaddy.com. We appreciate your business!

    Sincerely,
    GoDaddy.com DomainAlert team

    DomainGang.com - Digital Entertainment for Domainers
    Acroplex - Web & Graphics
    Acro.net - My Blog

  2. #2
    GreenFriendly.com
    biggedon's Avatar
    Join Date
    Sep 2002
    Location
    96.net
    Posts
    12,888
    Blog Entries
    1
    Country

    United States
    DNF$
    57,936
    Bank
    0
    Total DNF$
    57,936
    Donate  
    yeah

    i got two of these emails yesterday

    knew it was fake when i did a "hover over" the link

    also who would attempt to steal my crap names at GoDaddy?
    Need A SedoPro Account PM Me * nev.org * pmm.org * svc.net * ispoof.com * umm.org * sop.net * qfm.net * upyo.com * vioz.com * uce.org * wta.net * eoso.com * Coming Soon: Appraise.xxx

  3. #3
    Bloody Hell
    Acro's Avatar
    Join Date
    Feb 2004
    Location
    USA
    Posts
    28,132
    Country

    Holy See
    DNF$
    15,334
    Bank
    0
    Total DNF$
    15,334
    Donate  
    I got 5 so far. Complaint sent via http://www.servercentral.net/supportrequest

    DomainGang.com - Digital Entertainment for Domainers
    Acroplex - Web & Graphics
    Acro.net - My Blog

  4. #4
    DNF Addict
    jdk's Avatar
    Join Date
    Jul 2004
    Location
    Florida
    Posts
    7,079
    Country

    United States
    DNF$
    781
    Bank
    0
    Total DNF$
    781
    Donate  
    I received 7 over the past two days. I forwarded them to GoDaddy, but likely won't do any good.

  5. #5
    PRED's Avatar
    Join Date
    May 2006
    Posts
    9,093
    Country

    UK
    DNF$
    6,282
    Bank
    0
    Total DNF$
    6,282
    Donate  

    Thumbs up

    thanks very much Acro, as ever you are always on top of things
    cheers. I actually just got 5!
    If it had been one i would maybe have clicked but seen the redirect.
    I havd already junked them as phishing and redirected one to GoDaddy support.
    Spread the word on the forums guys!

  6. #6
    Bloody Hell
    Acro's Avatar
    Join Date
    Feb 2004
    Location
    USA
    Posts
    28,132
    Country

    Holy See
    DNF$
    15,334
    Bank
    0
    Total DNF$
    15,334
    Donate  
    NP Pred. The email is very well constructed, also the form page itself that takes the username/password is exceptionally done. I submitted a few pairs such as "fbi_is_coming/sore_loser" - hopefully they will be shut down soon. Just complain using the form above.

    DomainGang.com - Digital Entertainment for Domainers
    Acroplex - Web & Graphics
    Acro.net - My Blog

  7. #7
    Platinum Lifetime Member
    Seraphim's Avatar
    Join Date
    Jan 2006
    Location
    Hillsboro, OR
    Posts
    3,554
    DNF$
    17,654
    Bank
    0
    Total DNF$
    17,654
    Donate  
    Whoa, got several of these. Thanks for the heads up Theo.
    Generics: Seraphim.com | Gaelic.com
    Poland Cities: Bialystok.com | Gdynia.com | Sosnowiec.com | Torun.com | Zabrze.com | Olsztyn.com

  8. #8
    Bloody Hell
    Acro's Avatar
    Join Date
    Feb 2004
    Location
    USA
    Posts
    28,132
    Country

    Holy See
    DNF$
    15,334
    Bank
    0
    Total DNF$
    15,334
    Donate  
    The form and images are hosted at
    Code:
     http://elpos.ba/galerija/albums/userpics2/msg/
    .ba = Bosnia

    Some photos of the sore losers implicated in this scam:

    Code:
    http://elpos.ba/galerija/albums/userpics2/ado.jpg
    http://elpos.ba/galerija/albums/userpics2/enes.JPG
    http://elpos.ba/galerija/albums/userpics2/square00.JPG
    http://elpos.ba/galerija/albums/userpics2/square05.JPG
    http://elpos.ba/galerija/albums/userpics2/normal_square06.JPG
    http://elpos.ba/galerija/albums/userpics2/nijaz.JPG
    http://elpos.ba/galerija/albums/userpics2/kancelarija1.JPG
    Last edited by Acro; 04-10-2009 at 01:20 PM. Reason: Automerged Doublepost

    DomainGang.com - Digital Entertainment for Domainers
    Acroplex - Web & Graphics
    Acro.net - My Blog

  9. #9
    Domain Magnate™
    DomainMagnate's Avatar
    Join Date
    Nov 2005
    Location
    DnMagnate.com
    Posts
    4,044
    Follow DomainMagnate On Twitter Add DomainMagnate on Facebook
    DNF$
    30,591
    Bank
    0
    Total DNF$
    30,591
    Donate  
    I only got 4 so far, feeling a little left out :o
    Visit my blog

  10. #10
    Platinum Lifetime Member
    Seraphim's Avatar
    Join Date
    Jan 2006
    Location
    Hillsboro, OR
    Posts
    3,554
    DNF$
    17,654
    Bank
    0
    Total DNF$
    17,654
    Donate  
    Quote Originally Posted by Acro View Post
    The form and images are hosted at
    Code:
     http://elpos.ba/galerija/albums/userpics2/msg/
    .ba = Bosnia

    Some photos of the sore losers implicated in this scam:

    Code:
    http://elpos.ba/galerija/albums/userpics2/ado.jpg
    http://elpos.ba/galerija/albums/userpics2/enes.JPG
    http://elpos.ba/galerija/albums/userpics2/square00.JPG
    http://elpos.ba/galerija/albums/userpics2/square05.JPG
    http://elpos.ba/galerija/albums/userpics2/normal_square06.JPG
    http://elpos.ba/galerija/albums/userpics2/nijaz.JPG
    http://elpos.ba/galerija/albums/userpics2/kancelarija1.JPG
    That is bizarre. A hijacked domain perhaps? They aren't actually using their own domain are they? Would be pretty funny if so.
    Generics: Seraphim.com | Gaelic.com
    Poland Cities: Bialystok.com | Gdynia.com | Sosnowiec.com | Torun.com | Zabrze.com | Olsztyn.com

  11. #11
    Bloody Hell
    Acro's Avatar
    Join Date
    Feb 2004
    Location
    USA
    Posts
    28,132
    Country

    Holy See
    DNF$
    15,334
    Bank
    0
    Total DNF$
    15,334
    Donate  
    Probably so.

    Code:
    link to a toolkit http://elpos.ba/galerija/albums/userpics2/boom.php

    DomainGang.com - Digital Entertainment for Domainers
    Acroplex - Web & Graphics
    Acro.net - My Blog

  12. #12
    Platinum Lifetime Member
    Seraphim's Avatar
    Join Date
    Jan 2006
    Location
    Hillsboro, OR
    Posts
    3,554
    DNF$
    17,654
    Bank
    0
    Total DNF$
    17,654
    Donate  
    Quote Originally Posted by Acro View Post
    Probably so.

    Code:
    link to a toolkit http://elpos.ba/galerija/albums/userpics2/boom.php
    Wow, what the hell is that? What's a toolkit?
    Generics: Seraphim.com | Gaelic.com
    Poland Cities: Bialystok.com | Gdynia.com | Sosnowiec.com | Torun.com | Zabrze.com | Olsztyn.com

  13. #13
    Bloody Hell
    Acro's Avatar
    Join Date
    Feb 2004
    Location
    USA
    Posts
    28,132
    Country

    Holy See
    DNF$
    15,334
    Bank
    0
    Total DNF$
    15,334
    Donate  
    Looks like a root toolkit that can perform other penetration tasks remotely. Also it links to http://milw0rm.com which is a known repository of exploits. These ****ers need to be shut down.

    DomainGang.com - Digital Entertainment for Domainers
    Acroplex - Web & Graphics
    Acro.net - My Blog

  14. #14
    Domain Magnate™
    DomainMagnate's Avatar
    Join Date
    Nov 2005
    Location
    DnMagnate.com
    Posts
    4,044
    Follow DomainMagnate On Twitter Add DomainMagnate on Facebook
    DNF$
    30,591
    Bank
    0
    Total DNF$
    30,591
    Donate  
    Good research there Acro, just blogged about it
    Visit my blog

  15. #15
    Bloody Hell
    Acro's Avatar
    Join Date
    Feb 2004
    Location
    USA
    Posts
    28,132
    Country

    Holy See
    DNF$
    15,334
    Bank
    0
    Total DNF$
    15,334
    Donate  
    Nice pic, Michael

    DomainGang.com - Digital Entertainment for Domainers
    Acroplex - Web & Graphics
    Acro.net - My Blog

  16. #16
    Dances With Dogs
    Gerry's Avatar
    Join Date
    Dec 2006
    Location
    PortaPotty
    Posts
    17,854
    Country

    Yemen
    DNF$
    21,607
    Bank
    0
    Total DNF$
    21,607
    Donate  
    Yea, DNFers, Mobility, NPers post on your twitter accounts also.

    Many noobs (and veterans) may fall for this.

    Phew, what a relief.

    And to think I had to acually renew domain names.






















    =)
    Last edited by Gerry; 04-10-2009 at 02:03 PM. Reason: Automerged Doublepost

    "Just a lot of embarrassment, embarrassed to be part of group of domainers who would do this to their fellow man.",
    Condemnation of Mobee boys and investors by our precious Mother Theresa of Domaindom

  17. #17
    Domains

    Join Date
    Oct 2002
    Location
    Nirvana
    Posts
    3,439
    Country

    United States
    DNF$
    13,600
    Bank
    0
    Total DNF$
    13,600
    Donate  
    Quote Originally Posted by biggedon View Post
    also who would attempt to steal my crap names at GoDaddy?
    people with crap mentalities (or crack problems)...

  18. #18
    Bloody Hell
    Acro's Avatar
    Join Date
    Feb 2004
    Location
    USA
    Posts
    28,132
    Country

    Holy See
    DNF$
    15,334
    Bank
    0
    Total DNF$
    15,334
    Donate  
    Looks like the hacking tools have been removed. The IP that was sending the emails has also been turned off.

    DomainGang.com - Digital Entertainment for Domainers
    Acroplex - Web & Graphics
    Acro.net - My Blog

  19. #19
    DotAgent
    Domainator's Avatar
    Join Date
    Sep 2004
    Posts
    1,052
    DNF$
    7,216
    Bank
    0
    Total DNF$
    7,216
    Donate  
    We reported these to GD yesterday and they confirmed was a scam..
    DOMAINator

  20. #20
    Platinum Lifetime Member
    Seraphim's Avatar
    Join Date
    Jan 2006
    Location
    Hillsboro, OR
    Posts
    3,554
    DNF$
    17,654
    Bank
    0
    Total DNF$
    17,654
    Donate  
    Quote Originally Posted by Acro View Post
    Looks like the hacking tools have been removed. The IP that was sending the emails has also been turned off.
    You and LegendaryJP need to start your own DN-PI service, you both have solid research skills. I know it's inevitable I'd send some cash your way.
    Generics: Seraphim.com | Gaelic.com
    Poland Cities: Bialystok.com | Gdynia.com | Sosnowiec.com | Torun.com | Zabrze.com | Olsztyn.com

Page 1 of 2 1 2 LastLast

Bookmarks

Domain name forum recommended by Domaining.com