[LINK] ICANN phishing

[Richard Chirgwin]

Kim Holburn wrote:
>
> On 2006 Oct 27, at 3:57 PM, Richard Chirgwin wrote:
>
>> And the headers say?
>
> As you can see it's not really conclusive (I've changed my info).
>
> Received: from netsol.outbound.ed10.com (netsol.outbound.ed10.com 
> [64.14.81.242])
Is e10 a registrar? Because it has, on the face of it, nothing to do 
with Network Solutions, the purported source of the e-mail. I would say 
a message claiming to be from Network Solutions, but actually coming 
from a company called e-Dialog, and asking for "enter your password", is 
conclusive enough to be counted as phishing.

RC



> by my-mail-server.my-company.com.au (Postfix) with ESMTP id 60620CE03B
> for <me at my-company.com.au <mailto:me at my-company.com.au>>; Thu, 26 Oct 
> 2006 22:05:37 +1000 (EST)
> From: "Network Solutions" <NetworkSolutions at info1.networksolutions.com 
> <mailto:NetworkSolutions at info1.networksolutions.com>>
> Reply-To: "Network Solutions" 
> <NetworkSolutions.EW463N.93333 at info1.networksolutions.com 
> <mailto:93333 at info1.networksolutions.com>>
> To: me at my-company.com.au <mailto:me at my-company.com.au>
> Subject: Your WHOIS Contact Information :: Confirmation
>
>
>> Kim Holburn wrote:
>>> I have received a number of emails from Domain registrars purporting 
>>> to be on behalf of ICANN and asking me to log into my registrar and 
>>> check the details of my domains.
>>>
>>> I am a bit taken aback that Domain registrars would send stuff like 
>>> this because these are so like phishing emails.  I can't see how 
>>> this can be good in the long run.
>
> --
> Kim Holburn
> IT Network & Security Consultant
> Ph: +61 2 61258620 M: +61 417820641  F: +61 2 6230 6121
> mailto:kim at holburn.net  aim://kimholburn
> skype://kholburn - PGP Public Key on request 
> Cacert Root Cert: http://www.cacert.org/cacert.crt
> Aust. Spam Act: To stop receiving mail from me: reply and let me know.
> Use ISO 8601 dates [YYYY-MM-DD] http://www.saqqara.demon.co.uk/datefmt.htm
>
> Democracy imposed from without is the severest form of tyranny.
>                           -- Lloyd Biggle, Jr. Analog, Apr 1961
>
>
>