trimMail's Email Battles: Spam, Security, Privacy, Spyware, Phishing & Viruses from the Front Lines.

Brought to you by trimMail Inbox.
Securing networks from spam, spyware, DoS
attacks, phishers, and viruses worldwide. »»

Email BattlesThe Web 

 

Submit News

EB News Sections

Front Page

NewsBytes

Browsers

Email

Groupware

Op Systems

Phishing

Privacy

Security

Spam

Viruses

Vulnerabilities

The Internet Traffic Report monitors the flow of data around the world. It then displays a value between zero and 100. Higher values indicate faster and more reliable connections.

Click here to get protected from spyware, trojans, and system monitors. FREE TRIAL! Advertisement

spacer.gif

Go Daddy - NectarTECH Message Transcripts

Full Story: How Go Daddy Lost A Long Time Customer To A Phisher

January 9, 2006


From: Go Daddy Spam and Abuse Department
To: admin@nectartech.com
Sent: Monday, January 09, 2006 4:41 PM
Subject: ACTIVE PHISHER DETECTED AT NECTARTECH.COM

It has been brought to our attention that your domain name has been implicated in a phishing scheme. This action is a violation of Go Daddy's Universal Terms Of Service and Domain Registration Agreement.

A phishing attack is an attempt to steal Internet users personal identity data and/or financial or ecommerce account information. The term "phishing" arises from the use of increasingly sophisticated lures to "fish" for users' financial information and passwords. Phishing schemes use 'spoofed' e-mail messages to lead consumers to counterfeit websites designed to trick recipients into divulging financial data such as credit card numbers, account usernames, passwords and social security numbers.

In short, your website is being used to commit crimes against innocent people.

In your particular case, your site is actively being used to obtain login information from Paypal.com customers; a screenshot of the offending content has been attached. The offending content can be found at the following URL:

http:// 69.50.229.44.ip.nectartech.com/ forum/ tcpsupport/ index.php

The content located at the above URL must be removed immediately.

It is possible that a third party was able to gain access to your website, without your knowledge, in order to upload these files and initiate this abusive action. This does not change that fact that it is your responsibility to ensure that your website is secure from this type of exploitation. Because of this possibility we are giving you this opportunity to stop this abuse.

*************IMPORTANT*********************
ACTION FROM YOU IS REQUIRED!

Due to the possibility of credit card fraud, you will need to perform the following actions as soon as possible:

1. Remove the offending content located at the above URL.
2. Reply to abuse@godaddy.com with a statement that you have removed this content.

If you do not respond to this warning by CLOSE OF BUSINESS TODAY (5:00 PM, Arizona time) we will be left with no choice but to suspend the NECTARTECH.COM domain name. If you respond to this message, but neglect to remove the offending content, your domain name will be suspended.
*******************************************

If you wish to discuss this situation via telephone Go Daddy's Spam and Abuse Department can be reached at 480-505-8894.

Sincerely,

Spam and Abuse Department
GoDaddy.com

***

From: NectarTech Network Abuse
To: Go Daddy Spam and Abuse Department
Sent: Monday, January 09, 2006 6:17 PM
Subject: Re: ACTIVE PHISHER DETECTED AT NECTARTECH.COM

Hello,

We have removed the offending material from this machine which was found to have a compromised script.

We appreciate you bringing this matter to our attention.

Nick Mariani
Network Abuse
NectarTECH, LLC
www.nectartech.com
+1 877.852.3869 (sales/support)
+1 973.273.5805 (fax)

spacer.gif

EB Network Tools

Mail Server Profiler new

DNS Lookup

IP Address Lookup

Whois Lookup

Ping

Global Virus Watch

more tools...

About Us

RSS Feeds

Submit News

Other Resources

Contact Us

BJ Gillette, Editor

As Featured on NewsNow

Global Virus Watch

The latest virus outbreak alerts from F-Secure, Trend Micro, Panda, and Sophos. Each anti-virus fighter is reporting the state of the Virus Battles on its front, which reflects a unique customer and geographic profile. Fascinating, isn't it?


spacer.gif spacer.gif spacer.gif

Other Resources

Blogs: Spam: Securence / Spamblogging / Spam Kings / SpamRoll / War On Spam / Blogs: General: Addict3d / hack in the box / Slashdot / Techdirt / Blogs: p2p: Slyck / Zeropaid / Blogs: Phishing: Fraud, Phishing and Financial Misdeeds / MillerSmiles / Blogs: Security: Spyware Confidential / Martin McKeay / Blogs: Admin: IBM Lotus: Ed Brill / IBM Lotus: The Power Of the Schwartz / Microsoft: Peter de Haas / Microsoft: You Had Me At EHLO / Service Provider Journal / Blogs: Link Spam: Spam Huntress / Aggregata: NewsNow: Security / NewsNow: Spam / Spam Newstrove / Stacks: Center for Democracy and Technology / TOASTEDspam / Virus.Org / Vmyths / Broadsheets: Broadband News / Computerworld Email News / Google Spam News / Emarketer Daily / Help Net Security / Yahoo Spam News / ZDNet news /



Copyright © 2009 2A Data, Inc. All rights reserved. Privacy policy.