10|29|2008 9:19 pm EDT
WARNING: Network Solutions Phishing Scam
Fast on the heels of the recent Enom phishing scam, another phishing attack attempting to con domain name registrants into providing their customer information is under way. Network Solutions (NSI) domain customers are the target this time. The spam email messages being sent out warn the user of their domain expiring. Current reports show that the domain name com42.asia is being used and disguises itself as a site that looks identical to NetworkSolutions.com. As the public and internet providers become aware of the abuses, both the Enom and NSI phishing attackers are adapting to these reports by changing the domain name addresses they use. See full phishing email after the link.
Dear Network Solutions Customer,
We recently notified you that the registration period for your Network
Solutions domain name had expired. As a benefit of having previously
registered a domain name(s) with Network Solutions, you are eligible to
receive a percentage of the net proceeds that were generated from the
renewal and transfer of the domain name you chose not to renew. Since you
have chosen not to renew the domain name listed below during the
applicable grace period, we were successful in securing a backorder for
this domain name on your behalf and it has been transferred to another
party in accordance with the Service Agreement.
Renew your domain now – http://www.networksolutions.com.com42.asia
You must click on the following link, enter your domain name, and confirm
your contact information in order to claim these funds. If your contact
information is not correct, you must enter Account Manager and make the
appropriate changes prior to clicking “submit” from the confirmation
screen. If you do not do this, you will be confirming inaccurate
information and will not receive any payment. Checks will only be made
payable and mailed to the Account Holder of record.
Sincerely,
Network Solutions® Customer Support
Related Posts


10 Comments
Shashi Bellamkonda at Network Solutions
October 29, 2008 @ 10:21 pm EDT
Hi Adam,
Its good to be able to warn people about this phishing scam. We posted our own alert a few hours back http://tinyurl.com/5ojysg.
Shashi Bellamkonda
Tony Toews
October 29, 2008 @ 10:29 pm EDT
Note that domains other than com42.asia are being used for this and the Enom phishing scam.
Of course this one was obvious as I would never, ever use Network Solutions as a domain registrar after they unilaterally mucked with the DNS system a few years back.
Adam Strong
October 29, 2008 @ 11:14 pm EDT
Thanks Tony . . I mentioned in the article that the scammers are changing domains as fast as they get figured out.
Cartoonz
October 30, 2008 @ 11:10 am EDT
I got one using a .MOBI as a target… I guess .MOBI has finally found its niche?
Paul
October 30, 2008 @ 3:39 pm EDT
JUST got that scam email one minute ago and Googled this up. Everyone wants to get something for nothing. There are nickel auctions held on eBay now for crap like recipes or whatever that are solely for matching up eBay id’s to full names, full addresses, and email. All of that together makes for a damn convincing phishing email from “PayPhal”. Just NEVER link from within emails. EVER EVER EVER. Sticking to that one rule will stop most of the pickpocket attempts.
Chris
October 30, 2008 @ 4:20 pm EDT
Sedo sold me a domain 3 days ago and then cancelled the order today so they could raise the price by several hundred dollars. What kind of scam is this? Is this normal business practice for these people? They said they would refund my money, but I want the domain! It’s not worth several hundred dollars more though! What a scam deal!!!!
Fred
October 31, 2008 @ 8:44 am EDT
Dear Network Solutions
Fred
October 31, 2008 @ 8:45 am EDT
Ooops. Last post should have indicated that this was the latest phishing letter I got.
gb
October 31, 2008 @ 9:21 am EDT
Howdy,
Got one just like Fred. Got the Enom one, too.
Very lame to have posted that with the included link.
How about wrecking the link in fred’s posting?
Adam Strong
November 1, 2008 @ 1:20 am EDT
gb, thanks i fixed it.