Fake ICANN Email looks like it comes from Godaddy

[biggedon]

Important ICANN Notice Regarding Your Domain Name(s)Back to MessagesFrom: accountupdate@godaddy.com View Contact
Add to Address Book | Block SenderFull HeaderReply To:
To:me:
Bcc:
Sent: Sun, Apr 18, 2010 02:38 PMDownload All | ****************************** ***********
Important ICANN Notice Regarding Your Domain Name(s)
****************************** ***********

Dear User,

it is that time of year again. ICANN(the Internet Corporation for Assigned Names and Numbers) annually requires that all accredited registrars (like GoDaddy.com) ask their domain administrators/registrants to review domain name contact data, and make any changes necessary to ensure accuracy. According to our records you are the ADMINISTRATIVE CONTACT for one or more domains registered at GoDaddy.com, Inc. as of Apr 1st, 2010.

To review/update your Account data, simply:
+ Login to https://dcc.godaddy.com/ default.aspx?isc=ICANN0908a& amp;ci=8987
(note <<fake link above goes to dcc.godalddy.com, even though it may show 'godaddy' here)
+ You will be taken to a landing page and asked to enter your account information
Please take a look that your account and domain information is up to date.

If, however, your domain contact information is inaccurate, you must correct it. (Under ICANN rules and the terms of your registration agreement, providing false contact information can be grounds for domain name cancellation.) To review the ICANN policy, visit:http://www.icann.org/ whois/wdrp-registrant-faq.htm

Should you have any questions, please email us at support@godaddy.com or call our customer support line at (480) 505-8877.

Thanks for your attention and thank you for being a GoDaddy.com, Inc. customer.

Sincerely,
GoDaddy.com, Inc. Domain Support


If you are the domain administrator of more than one GoDaddy.com domain account, you may receive this notice multiple times.
------------------------------ ------------------------------ ------------------------------ ---
Copyright (c) 2008 GoDaddy.com, Inc. All rights reserved.





Mods can move to Godaddy section

---------- Post added at 03:11 PM ---------- Previous post was at 03:03 PM ----------

also using godaiddly.com in these phishing emails

domain was regged today

[copper]

It does look like it's from GoDaddy.

All you have to do is right mouse click while pointing any url,
choose "copy link address" and paste it into notepad to see if it's phishing attempt or not.

[biggedon]

It does look like it's from GoDaddy.

All you have to do is right mouse click while pointing any url,
choose "copy link address" and paste it into notepad to see if it's phishing attempt or not.

i always do the hover over, especially when anything comes from godaddy

[copper]

i always do the hover over, especially when anything comes from GoDaddy

Humm...
I remember reading some where that visible url by hover over can be faked.
So, I always copy/paste on notepad.

[biggedon]

Humm...
I remember reading some where that visible url by hover over can be faked.
So, I always copy/paste on notepad.

i did notice that when you copy the email, it converts the link.


i got two on same day and sent both to GD