First eNom, now Network Solutions. I had various reports of the NetSol phishing email, so it was only a matter of time before I started to get them. Amongst the phishing emails was a legit one from Network Solutions themselves.
I’d question their strategy of sending an email response to a phishing email, given that e-mail as a communications channel is not trusted by many consumers. For those that don’t know how to distinguish between the fake email and the real one, I have posted both of them below.
Here is a phishing tip that will save your bacon: Don’t click on links in emails! Use your browser and type in the address that you know manually. If you are one of the (un)lucky ones who has logged into your Network Solutions account recently after clicking on a link from the phishing email below, then you need to change your password AND your security question. Oh… and hope that your domains haven’t been transferred to Siberia.
— this is the evil phishing email —
Return-Path: <laav...@bobrea.plus.com>
From: “networksolutions.com” <supp...@networksolutions.com>
Subject: Inaccurate whois information.
Date: Thu, 30 Oct 2008 22:03:17 -0500
Dear Network Solutions® Customer,
On Thu, 30 Oct 2008 22:03:17 -0500 we received a third party complaint of invalid domain contact information in the Whois database for this domain Whenever we receive a complaint, we are required by ICANN regulations to initiate an investigation as to whether the contact data displaying in the Whois database is valid data or not. If we find that there is invalid or missing data, we contact both the registrant and the account holder and inform them to update the information.
Please note: ICANN (the Internet Corporation for Assigned Names and Numbers) regulations state that the WHOIS Administrative Contact may initiate and approve domain name registration transfers from your Network Solutions account to other Registrars. If you are not listed as the WHOIS Administrative Contact a transfer can occur without your knowledge if Domain Protect is not enabled for the domain name registrations listed above.
To change the WHOIS Administrative Contact Information for any of your domains, please login to Account Manager:
1. Log in to Account Manager at: http://www.networksolutions.com.sys67.biz.
2. Click on the “Profile & Accounts” tab in the left navigation menu to be taken to a page listing your account details.
3. Click on “Accounts” and select the account you wish to edit.
4. Click “View/Edit WHOIS Contacts” to make your updates.
If you believe someone requested this change without your consent, please contact Customer Service.
If you would like to order additional services or to update your account, please visit us online.
Thank you for choosing Network Solutions. We are committed to providing you with the solutions, services, and support to help you succeed online.
Sincerely,
Network Solutions® Customer Support
— ends —
— this is the real Network Solutions email —
From: “Network Solutions”
Subject: Important: Phishing and Security
Dear Valued Network Solutions(R) Customer:
We’ve recently become aware of a phishing scam targeting domain name customers of a small number of registrars including Network Solutions(R). We wanted to alert you of this situation. Phishing is the practice of luring unsuspecting Internet users to a fake Web site by using an authentic-looking e-mail in an attempt to steal passwords, account information or other sensitive data.
At this time, we know that fraudulent e-mails are being sent to some domain name customers, regardless who the registrar of record is, which include links to sites that look like networksolutions.com or other domain provider sites; however they are fake Web sites. These e-mails are attempting to capture login information. For more information and tips on identifying phishing scams, please visit our blog at www.blog.networksolutions.com/.
If you believe you have received an e-mail of this type, have clicked on the link, and provided your login information, we recommend the following for security purposes:
1. Log in to your account from the Network Solutions Web site.
2. Review your account information for accuracy
3. Choose a new password security question and answer
4. Change your password
Thank you for your attention to this message.
Sincerely,
Network Solutions(R) Customer Support
*****************************************************
This e-mail was sent from a notification-only address. Please do not reply to this message. For Network Solutions customer service inquiries, please visit: http://www.networksolutions.com/help/index.jsp
Please note, in accordance with our Privacy Policy, we will continue to send you notices and other important information affecting your account or services in order to fulfill our service obligations to you.
Access our Privacy Policy: customersupport.networksolutions.com/article.php?id=3D306
Access our Service Agreement:
http://www.networksolutions.com/legal/static-service-agreement.jsp
(c) 2008 Network Solutions, LLC. All rights reserved. Network Solutions, 13861 Sunrise Valley Drive, Dept ACQM, Herndon, VA 20171
— ends —
