Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: InfoSec Handlers Diary Blog InfoSec Handlers Diary Blog

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

GoDaddy Scam/Phish/Spam

Published: 2010-06-21
Last Updated: 2011-02-08 23:45:29 UTC
by Adrien de Beaupre (Version: 1)
3 comment(s)

A number of readers (and myself included) have received an email claiming to be from GoDaddy. The email is grammatically correct,  and appears quite genuine. The subject is " Order Confirmation" and interestingly the images within the HTML are pulled from, excepting one which came from "hxxp://".  The links in the emails I have seen point to "hxxp://" among others. The phishing site and IP address and domain registration are in the Ukraine.

Thanks to Christopher and Dwight!

Adrien de Beaupré Inc.

3 comment(s)
Diary Archives