Beware: Godaddy account phishing attempts - DNForum - Domain Sales, Domain Forum, Domain Appraisals, Domain Registrars

**JuniperPark** · 06-25-2009, 01:08 PM

Got 3 of these already today:

Code:

</script> </head> <body bgcolor="#ffffff"> 
<table border="0" cellspacing="0" cellpadding="0" width="100%">
<tr>
<td><center>
<table border="0" cellspacing="0" cellpadding="0" width="539" align="center">
<tr>
<td>
<table border="0" cellspacing="0" cellpadding="0" width="539">
<tr>
<td width="273" align="left" style="padding-left:9px"><font size="2" style="font-size:12px;font-weight:bold" face="arial,helvetica">24/7 Sales & Support: (480) 505-8877</font></td>
<td width="266"><a target="_blank">
<img src="http://www.akstudio.biz/gallery/albums/.../msg/ani_sear.gif" border="0" width="266" height="22"></a></td>
</tr>
<tr>
<td colspan="2">
<img src="http://www.akstudio.biz/gallery/albums/.../msg/img_topb.gif" border="0" width="539" height="17"><br>
<table border="0" cellspacing="0" cellpadding="0" width="100%" style="border:1px solid black">
<tr>
<td>
<table border="0" cellspacing="0" cellpadding="0" width="360">
<tr>
<td><center><a target="_blank">
<img src="http://www.akstudio.biz/gallery/albums/.../msg/img_stat.jpg" width="360" height="116" border="0" alt="Domain Registration Confirmation"></a></center></td>
</tr>
<tr>
<td style="padding:9px" width="100%" align="left"><font face="arial, sans serif" style="font-size:12px;line-height:16px" size="2"><br>
Dear Customer,<br><br>
This notification is generated automatically as a service to you.<br><br></font>
<table border="0" cellspacing="0" cellpadding="0" bgcolor="#e2e2e2">
<tr>
<td valign="middle" align="left" style="padding:12px">
<span style="FONT-SIZE: 9pt; COLOR: #333333; FONT-FAMILY: Verdana">Because of 
unusual number of invalid login attempts on you account, we had to believe that, 
their might be some security problem on you account. So we have decided to put 
an extra verification process to ensure your identity and your account security. 
<br>
Please click on
<a href="http://godaddy.com.5545564655345456786565756745376.546787654325668798776542356786796454576879877965.search799.com/www3.login.idp.godaddy.com/login.idp.godaddy.com/login.aspxSPKey=/login.aspxSPKey=GDDCCEB05&myaUrl=fdefault.aspxci=8987/login.aspxSPKey=update/goddady-update/index.php">sign in to <font face="arial, sans serif" style="font-size:12px;line-height:16px" size="2">
domain servers</font></a> to continue to the verification process and ensure 
your account security. It is all about your security. Thank you. and visit the 
customer service section. </span></td>
</tr>
</table><br>
<font face="arial, sans serif" style="font-size:12px" size="2"> <b>please contact us within 
1 days.</b><br><br>
If you need to address this matter, or in any way need further assistance or technical support, call us any time at (480) 505-8877 or email us at
<a href="http://mail.google.com/mail/h/1mahxi4rtjf4j/?v=b&cs=wh&to=support@godaddy.com" style="color:#0000ff;font-size:12px;font-weight:normal;font-family:arial;text-decoration:underline" target="_blank">support@godaddy.com</a>. We appreciate your business!<br><br>
Sincerely,<br>
GoDaddy.com DomainAlert team<br></font></td>
</tr>
</table>
</td>
<td valign="top" bgcolor="#e7e7e7" width="178">
<a href="https://www.godaddy.com/gdshop/default.asp?prog_id=GoDaddy&isc=gdbb366" target="_blank">
<img src="http://www.akstudio.biz/gallery/albums/.../msg/gdlog_we.gif" border="0" width="178" height="74"></a><br>
<table border="0" cellspacing="0" cellpadding="0" width="100%">
<tr>
<td><center>
<a href="http://www.godaddy.com/gdshop/default.asp?prog_id=GoDaddy&isc=gdbb366" style="text-decoration:none" target="_blank"><font size="2" style="font-size:12px;text-decoration:none" face="arial,helvetica" color="#3c6012">www.GoDaddy.com</font></a><br><br>
<table border="0" cellspacing="0" cellpadding="0" width="150">
<tr>
<td width="150" style="padding-bottom:18px"><br>
<table style="border:1px solid #797979" border="0" cellspacing="0" cellpadding="0" width="150" bgcolor="white">
<tr>
<td align="center" style="padding-bottom:6px">
<font face="arial, sans serif" style="font-size:11px"><b>Take 10%** off your next order at GoDaddy.com.</b><br>
Simply enter <b>gdbb366</b> in your shopping cart or mention the offer code when you call (480) 505-8877.</font></td>
</tr>
</table>
</td>
</tr>
<tr>
<td width="100%" style="padding-bottom:18px">
<table style="border:1px solid #797979" border="0" cellspacing="0" cellpadding="0" width="100%" bgcolor="white">
</table>
</td>
</tr>
<tr>
<td height="23" align="center" valign="middle" bgcolor="#797979" width="150"><font face="arial, sans serif" style="font-size:12px;line-height:16px;font-weight:bold" size="2" color="white">Helpful Links</font></td>
</tr>
<tr>
<td bgcolor="#eeeeee" width="100%">
<table border="0" cellspacing="0" cellpadding="0" style="border-top:1 solid #797979;border-left:1 solid #797979;border-right:1 solid #797979;border-bottom:1 solid #797979" width="100%">
<tr>
<td valign="top" style="padding:4px;padding-top:7px">
<img src="/spc_ff66.gif" border="0" width="8" height="8"></td>
<td style="padding:4px"><font face="arial, sans serif" style="font-size:11px;line-height:14px" size="2"><a href="https://www.godaddy.com/gdshop/registrar/search.asp?prog_id=GoDaddy&isc=gdbb366" style="color:#0000ff;font-size:11px;font-weight:normal;font-family:arial;text-decoration:underline" target="_blank">Register</a> domain names</font></td>
</tr>
<tr>
<td valign="top" style="padding:4px;padding-bottom:7px">
<img src="/spc_ff66.gif" border="0" width="8" height="8"></td>
<td style="padding:4px"><font face="arial, sans serif" style="font-size:11px;line-height:14px" size="2"><a href="https://www.godaddy.com/gdshop/transfers/landing.asp?prog_id=GoDaddy&isc=gdbb366" style="color:#0000ff;font-size:11px;font-weight:normal;font-family:arial;text-decoration:underline" target="_blank">Transfer</a> domain names</font></td>
</tr>
</table>
</td>
</tr>
<tr>
<td width="100%"><br>
<table style="border:1px solid #797979" border="0" cellspacing="0" cellpadding="0" width="150" bgcolor="white">
<tr>
<td align="center" style="padding-bottom:6px">
<font style="font-size:11px" face="arial,helvetica">Make money with <br>your parked domain!<br>
Let us show you how...<br>
<a href="http://www.godaddy.com/gdshop/park/landing.asp?prog_id=GoDaddy&isc=gdbb366" style="color:#0000ff;font-size:11px;font-weight:normal;font-family:arial;text-decoration:underline" target="_blank">Learn more!</a></font></td>
</tr>
</table>
</td>
</tr>
</table></center><br>
</td>
</tr>
</table>
</td>
</tr>
</table>
</td>
</tr>
</table>
</td>
</tr>
<tr>
<td align="center" style="padding-top:0px"><font face="arial, sans serif" style="font-size:10px" size="1">*Free hosting, photo album and blog services are ad-supported. Ad-supported Web sites contain <br>relevant online advertising on a small portion of the site, but DO NOT include obtrusive pop-up ads.<br>
**Not applicable to premium domains, bulk domain purchases, discounted domain products, Sunrise/Landrush domain registrations, .ME domain registrations, discounted memberships or maintenance plans; additional disk space and bandwidth renewals, custom page layouts, custom headers, posters or gift cards. Discount reflected in your shopping cart – cannot be used in conjunction with any other offer or promotion.<br><br>
Copyright © 2009 GoDaddy.com, Inc.. All rights reserved.</font></td>
</tr>
</table></center>
</td>
</tr>
</table>

**bmugford** · 06-25-2009, 02:56 PM

I received about 10 of these earlier AM this morning. I wish I knew who to report these to at GoDaddy so they could shut it down.

Brad

**wmloz** · 06-25-2009, 03:05 PM

I can't quite make out what that is, but I too got a few "transfer requests" for the same name supposedly from godaddy.

**aZooZa** · 06-25-2009, 03:54 PM

Examine the 'destination link' - domainers should know about phishing...

**myst woman** · 06-25-2009, 04:13 PM

is it just godaddy or all registrar names?

does this mean people are hunting the whois?

**biggedon** · 06-25-2009, 04:20 PM

whoever sent out these emails, may have embedded their affiliate code

http://www.godaddy.com/gdshop/park/l...dy&isc=gdbb366

**PRED** · 06-25-2009, 04:25 PM

yes i got a load too. fact i got about 20 i knew was a scam, didnt click on anything, didnt want to risk

this is serious fraud they are attempting here

surely we should forward this to police or something? let them track down

this isn't simple spam

as im sure godaddy will do nothing

**JuniperPark** · 06-25-2009, 07:07 PM

Yep, this is always the clue -- they encourage you to click a link to anoter domain.

This:

godaddy.com.5545564655345456786565756745376.546787 65432566879877654235678679645576879877965.search79 9.com

Is taking you here:
search799.com

**Arrogance** · 06-25-2009, 07:08 PM

Thanks for the heads up on this

**YourIdealDomain** · 06-25-2009, 10:48 PM

I got 12 of these yesterday. Gmail flagged them and gave the following warning: "Warning: This message may not be from whom it claims to be. Beware of following any links in it or of providing the sender with any personal information."

It would have been obvious that this wasn't a real GoDaddy message even without the warning because of the spelling mistakes and grammar problems. You would think that scam artists would at least take a few minutes to check their own work to make it seem more believable.

The message that they sent is below. I have highlighted a few of the mistakes.

"Because of unusual number of invalid login attempts on you account, we had to believe that, their might be some security problem on you account. So we have decided to put an extra verification process to ensure your identity and your account security.

Please click on sign in to domain servers to continue to the verification process and ensure your account security. It is all about your security. Thank you. and visit the customer service section. "

**Dave Zan** · 06-25-2009, 10:54 PM

Quote:

Originally Posted by PRED

as im sure godaddy will do nothing

What can Go Daddy do? They can maybe put a warning on their site and send
those sample phishing emails to the relevant authorities, but they can't always
go after the perpetrators if they're especially outside their jurisdiction.

If they're able to accurately figure out the ones doing that crap are indeed in
the U.S., then that's when they'll probably (and finally?) take action. They're
being targetted as an unfortunate consequence (?) of being the largest retail
registrar.

And damn it, I didn't get any of them.

06-25-2009, 02:56 PM	#2 (permalink)
bmugford Platinum Lifetime Member Name: Brad Last Online: Yesterday 10:24 PM iTrader: (2) Join Date: Apr 2008 Posts: 60 DNF$: 710 Location: USA Country:	I received about 10 of these earlier AM this morning. I wish I knew who to report these to at GoDaddy so they could shut it down. Brad __________________ DataCube.com - Buy and Sell Premium Domains

06-25-2009, 03:54 PM	#4 (permalink)
aZooZa Name: Dale Hubbard Last Online: Yesterday 12:09 PM iTrader: (45) Join Date: Jan 2003 Posts: 5,868 DNF$: 5,845 Location: Exeter, England Country:	Examine the 'destination link' - domainers should know about phishing... __________________ UK Drop Catching Services: Dropsystem.co.uk New! Canada TBR Drop Catching: Dropping.ca New! QUALITY MiniSites: NOTsoMINI.com

06-25-2009, 04:13 PM	#5 (permalink)
myst woman Platinum Lifetime Member Last Online: Yesterday 08:23 PM iTrader: (22) Join Date: Sep 2005 Posts: 964 DNF$: 1,145 Location: Los Angeles Country:	is it just godaddy or all registrar names? does this mean people are hunting the whois? __________________ thestockblog.net

06-25-2009, 04:20 PM	#6 (permalink)
biggedon iSpoof.com Last Online: Yesterday 10:17 AM iTrader: (112) Join Date: Sep 2002 Posts: 10,916 DNF$: 51,153 Location: 96.net	whoever sent out these emails, may have embedded their affiliate code http://www.godaddy.com/gdshop/park/l...dy&isc=gdbb366 __________________ worldiptv.com * svc.net * belisted.com * mobi.us.com * sop.net * qfm.net * upyo.com * vioz.com * Need A SedoPro Account PM Me

06-25-2009, 04:25 PM	#7 (permalink)
PRED Last Online: Yesterday 11:12 PM iTrader: (118) Join Date: May 2006 Posts: 7,935 DNF$: 1,005 Country:	yes i got a load too. fact i got about 20 i knew was a scam, didnt click on anything, didnt want to risk this is serious fraud they are attempting here surely we should forward this to police or something? let them track down this isn't simple spam as im sure godaddy will do nothing __________________ dental recruitment \| dental practices \| Coniston

06-25-2009, 03:05 PM	#3 (permalink)
wmloz Last Online: Today 12:25 AM iTrader: (6) Join Date: Feb 2004 Posts: 1,242 DNF$: 8,511	I can't quite make out what that is, but I too got a few "transfer requests" for the same name supposedly from godaddy.

06-25-2009, 07:07 PM	#8 (permalink)
JuniperPark Last Online: 11-06-2009 10:12 AM iTrader: (86) Join Date: Aug 2003 Posts: 2,448 DNF$: 3,010 Location: San Diego, CA Country:	Yep, this is always the clue -- they encourage you to click a link to anoter domain. This: godaddy.com.5545564655345456786565756745376.546787 65432566879877654235678679645576879877965.search79 9.com Is taking you here: search799.com __________________ *The only domain reseller BRAVE* enough to post prices: TheNameStore.com** ][

06-25-2009, 07:08 PM	#9 (permalink)
Arrogance Platinum Lifetime Member Last Online: Yesterday 08:52 PM iTrader: (44) Join Date: Aug 2008 Posts: 835 DNF$: 20 Location: VA Country:	Thanks for the heads up on this __________________ MarketNews.org AccountExecutive.org Meaningless.org SavingsRate.org JobGrowth.org GreenEurope.net

06-25-2009, 10:48 PM	#10 (permalink)
YourIdealDomain DNF Member Last Online: Yesterday 11:04 PM iTrader: (79) Join Date: Mar 2007 Posts: 506 DNF$: 6,528 Location: Canada Country:	I got 12 of these yesterday. Gmail flagged them and gave the following warning: "Warning: This message may not be from whom it claims to be. Beware of following any links in it or of providing the sender with any personal information." It would have been obvious that this wasn't a real GoDaddy message even without the warning because of the spelling mistakes and grammar problems. You would think that scam artists would at least take a few minutes to check their own work to make it seem more believable. The message that they sent is below. I have highlighted a few of the mistakes. "Because of unusual number of invalid login attempts on you account, we had to believe that, their might be some security problem on you account. So we have decided to put an extra verification process to ensure your identity and your account security. Please click on sign in to domain servers to continue to the verification process and ensure your account security. It is all about your security. Thank you. and visit the customer service section. "

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode