Network Solutions PHISHING
Email and full source of email below
---------------------------------
Dear Network Solutions Customer,
We recently notified you that the registration period for your Network Solutions domain name had expired. As a benefit of having previously registered a domain name(s) with Network Solutions, you are eligible to receive a percentage of the net proceeds that were generated from the renewal and transfer of the domain name you chose not to renew. Since you have chosen not to renew the domain name listed below during the applicable grace period, we were successful in securing a backorder for this domain name on your behalf and it has been transferred to another party in accordance with the Service Agreement.
Renew your domain now - http://www.networksolutions.com [phishing link]
You must click on the following link, enter your domain name, and confirm your contact information in order to claim these funds. If your contact information is not correct, you must enter Account Manager and make the appropriate changes prior to clicking "submit" from the confirmation screen. If you do not do this, you will be confirming inaccurate information and will not receive any payment. Checks will only be made payable and mailed to the Account Holder of record.
Sincerely,
Network Solutions® Customer Support
------------------------------
Return-path:
Envelope-to: xxxxxxxx@xxxxxxxxx.xxxx
Delivery-date: Thu, 30 Oct 2008 09:21:37 -0500
Received: from [78.132.165.204] (helo=windowsxp)
by cpanel63.gzo.com with esmtp (Exim 4.69)
(envelope-from )
id 1KvYOy-00040Z-0n
for xxxxxxxx@xxxxxxxxx.xxxx; Thu, 30 Oct 2008 09:21:36 -0500
Received: from [78.132.165.204] by smtp.secureserver.net; Thu, 30 Oct 2008 17:21:31 +0300
Message-ID: <01c93ab3$f32adf80$cca5844e@eblddbafwun>
From: "networksolutions.com Tech Support"
To:
Date: Thu, 30 Oct 2008 17:21:31 +0300
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0007_01C93AB3.F32ADF80"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2905
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2905
X-Spam-Status: Yes, score=10.7
X-Spam-Score: 107
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "sa02.gzo.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Dear Network Solutions Customer, We recently notified you
that the registration period for your Network Solutions domain name had expired.
As a benefit of having previously registered a domain name(s) with Network
Solutions, you are eligible to receive a percentage of the net proceeds that
were generated from the renewal and transfer of the domain name you chose
not to renew. Since you have chosen not to renew the domain name listed below
during the applicable grace period, we were successful in securing a backorder
for this domain name on your behalf and it has been transferred to another
party in accordance with the Service Agreement. [...]
Content analysis details: (10.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.1 DNS_FROM_RFC_BOGUSMX RBL: Envelope sender in bogusmx.rfc-ignorant.org
0.0 URIBL_RED Contains an URL listed in the URIBL redlist
[URIs: sys62.biz]
0.2 URIBL_GREY Contains an URL listed in the URIBL greylist
[URIs: sys62.biz]
2.0 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URIs: sys62.biz]
2.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URIs: sys62.biz]
0.5 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[78.132.165.204 listed in zen.spamhaus.org]
2.9 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS
X-Spam-Flag: YES
Subject: ***SPAM*** Attention: domain is expired.
another one
Dear Network Solutions® Customer,
On Fri, 31 Oct 2008 07:51:01 -0500 we received a third party complaint of invalid domain contact information in the Whois database for this domain Whenever we receive a complaint, we are required by ICANN regulations to initiate an investigation as to whether the contact data displaying in the Whois database is valid data or not. If we find that there is invalid or missing data, we contact both the registrant and the account holder and inform them to update the information.
Please note: ICANN (the Internet Corporation for Assigned Names and Numbers) regulations state that the WHOIS Administrative Contact may initiate and approve domain name registration transfers from your Network Solutions account to other Registrars. If you are not listed as the WHOIS Administrative Contact a transfer can occur without your knowledge if Domain Protect is not enabled for the domain name registrations listed above.
To change the WHOIS Administrative Contact Information for any of your domains, please login to Account Manager:
1. Log in to Account Manager at: http://www.networksolutions.com.
2. Click on the "Profile & Accounts" tab in the left navigation menu to be taken to a page listing your account details.
3. Click on "Accounts" and select the account you wish to edit.
4. Click "View/Edit WHOIS Contacts" to make your updates.
If you believe someone requested this change without your consent, please contact Customer Service.
If you would like to order additional services or to update your account, please visit us online.
Thank you for choosing Network Solutions. We are committed to providing you with the solutions, services, and support to help you succeed online.
Sincerely,
Network Solutions® Customer Support