legal A new type of Go Daddy phishing attempt - Watch Out!

[Adam DickerAdam Dicker is verified member.]

Just go this and it's fake! It almsot got me because it's a clients domain and I didn't want the site to be down. The acccount number is wrong so that tipped me off.
=========================================

Customer Number for this Account:25119454 kcnh.ca

The domains listed below expired on Feb. 22, 2011.

This is your last chance to renew your domain name(s)!You must renew by Feb. 25, 2011 or the domains listed below will be cancelled.

kcnh.ca

RENEW NOW: http://[email protected]/WWW.GODADDY.COM?dom=kcnh.ca

Please note:If you do not renew your domain(s) during the 3-day Renewal Grace Period, you may incur a fee of $80.00 in addition to the domain renewal fee. During this time, the domain name(s) will be moved to parked nameservers and any Website or email services associated with the domain name(s) may stop working. For further information about Domain Renewals, review the Domain Registration Agreement here.
==========================================
Host headers below:

Received: (qmail 22403 invoked from network); 22 Feb 2011 15:03:56 -0000
Received: from unknown (HELO p3pismtp01-022.prod.phx3.secureserver.net) ([10.6.12.27])
(envelope-sender <[email protected]>)
by smtp29.prod.mesa1.secureserver.net (qmail-1.03) with SMTP
for <[email protected]>; 22 Feb 2011 15:03:56 -0000
X-IronPort-Anti-Spam-Result: AlQDAA1eY03P7O0pkWdsb2JhbACYNwEBjgsVAQEBAQkLCgcRAyG9b4MQGASCMgSFDQ
Received: from toroondcbmts07-srv.bellnexxia.net ([207.236.237.41])
by p3pismtp01-022.prod.phx3.secureserver.net with ESMTP; 22 Feb 2011 08:03:55 -0700
Received: from toip57-bus.srvr.bell.ca ([67.69.240.184])
by toroondcbmts07-srv.bellnexxia.net
(InterMail vM.8.00.01.00 201-2244-105-20090324) with ESMTP
id <20110222150354.CBTA7854.toroondcbmts07-srv.bellnexxia.net@toip57-bus.srvr.bell.ca>
for <[email protected]>; Tue, 22 Feb 2011 10:03:54 -0500
Received: from toip60-bus.srvr.bell.ca ([67.69.240.187])
by toip57-bus.srvr.bell.ca with ESMTP; 22 Feb 2011 10:03:40 -0500
Received: from mtrlpq02-1279391671.sdsl.bell.ca (HELO R2D2AK47V869) ([76.65.247.183])
by toip60-bus.srvr.bell.ca with ESMTP; 22 Feb 2011 10:03:40 -0500
X-IronPort-Anti-Spam-Result: Aq4GACdYY01MQfe3/2dsb2JhbACYNwEBjTyBQsBmGASCMgSFDQ
From: "GODADDY" <[email protected]>
Subject: kcnh.ca expired
To: [email protected]
Content-Transfer-Encoding: 8bit
Content-Type: text/plain
Date: Tue, 22 Feb 2011 10:10:45 -0500
Message-Id: <20110222150354.CBTA7854.toroondcbmts07-srv.bellnexxia.net@toip57-bus.srvr.bell.ca>
X-Nonspam: None



IMPORTANT:For any cancelled .COM, .NET, .ORG, .INFO, .US, .BIZ, .CC, or .TV domain name, the Registry will hold the name in a Redemption Period for 30 days. During this time, the domain name
will be removed from the zone files (the list of domains currently in the global DNS); therefore, any web site or email services associated with the domain name will stop working. The original domain
registrant may retrieve the domain name from deletion during this period for a fee of $80. Thanks for choosing Go Daddy!
Sincerely,

Bob Parsons
CEO and Founder
GoDaddy.com

 

[jaydub]

Yup...you have to be very careful to look the GD emails over carefully as they seem to be going after them as I guess many just click the links thinking it really is GD...