Problem: Inaccurate whois information (fraudulent email) 5

Here is a lovely fraudulent email I received today targeting those of us who own domains.

They use a very clever domain name that took me a minute to catch.

Always beware of emails like this.  This email phishing scam was targeting Network Solution customers and sadly, at least a few will fall for it.

The safest thing to do when you get emails that are supposedly from your webhost, bank, credit card company, etc. is to go to that site directly from a bookmark or typing in the url.  Never go from links in your email to services like this.

Dear Network SolutionsŽ Customer, 

On Thu, 30 Oct 2008 23:23:17 +0100 we received a third party complaint of invalid domain contact information in the Whois database for this domain Whenever we receive a complaint, we are required by ICANN regulations to initiate an investigation as to whether the contact data displaying in the Whois database is valid data or not. If we find that there is invalid or missing data, we contact both the registrant and the account holder and inform them to update the information.

Please note: ICANN (the Internet Corporation for Assigned Names and Numbers) regulations state that the WHOIS Administrative Contact may initiate and approve domain name registration transfers from your Network Solutions account to other Registrars. If you are not listed as the WHOIS Administrative Contact a transfer can occur without your knowledge if Domain Protect is not enabled for the domain name registrations listed above.

To change the WHOIS Administrative Contact Information for any of your domains, please login to Account Manager:

1. Log in to Account Manager at: (Because I didn’t want to give a link to this thieving site, the url showed the correct address in print, but when you hovered over it, the actual destination url was so the fraudulent domain is actually
2. Click on the “Profile & Accounts” tab in the left navigation menu to be taken to a page listing your account details.
3. Click on “Accounts” and select the account you wish to edit.
4. Click “View/Edit WHOIS Contacts” to make your updates.

If you believe someone requested this change without your consent, please contact Customer Service.

If you would like to order additional services or to update your account, please visit us online.

Thank you for choosing Network Solutions. We are committed to providing you with the solutions, services, and support to help you succeed online.

Network SolutionsŽ Customer Support

Leave a Reply

5 Comments on "Problem: Inaccurate whois information (fraudulent email)"

Notify of
Chris Bailey

Glad it was useful to you. Apparently, there was a pretty heavy and well orchestrated attack with a ton of different domain names registered going after not only Network Solutions’ customers, but some other large registrars as well.

Just another part of life in wonderful cyberspace. 😀

NLP Trainer

I just woke up to this little bugger myself and admittedly I was pretty scared for a minute or two. Of course a quick google that pointed to sites like this set my mind greatly at ease…

Thanks for posting on it Chris!

Chris Bailey

Wow, Google sure works fast. A nice reminder to myself that “fresh” content can definitely help traffic.

Thanks for the comments Gordon and Manfred. And thanks for the additional domain info Manfred.

These types of scammers are constantly changing their urls as they are constantly being shut down or blocked by ISP’s.

The first one I posted was registered on 10/30 and was registerered earlier today, 10/31

Thanks again for helping make people aware.

Manfred Schmid

Just got the same email. McAfee Siteadvisor is blocking access to – in my case –

Gordon Styles

Thanks, great help. Just had 3 similar to this one. You are right – very clever. I even went to the website to see if it was real or not. Cheers. Gordon Styles in China