I have noticed a few suspicious emails recently and people have forwarded me copies of an email appearing to come from Network Solutions Tech Support. This email is fake (here is the notice from Network Solutions).

The only reason I am posting this as a tip is because several people have forwarded me this email telling me to make sure our domain information gets updated, so if they are believing it others probably are too.

One thing you will notice when you click on the link in the email is it takes you to a fake domain which ends with “.sys58.biz”. This is all you need to know to see it is a fake. The scammers simply mirrored the network solutions home page (ironically, it has the phishing scam warning on their page) and are redirecting your login information to their database, so they can log in as you and steal your domains by transferring it to them.

If you get this email, delete it.

For your reference, here is a copy of what the email looks like. I have seen several slight variations but they all link to the same page:

Subject: Inaccurate Whois Information / Your Domain Is In Transfer / Your Domain Is About To Expire

Dear Network Solutions® Customer,

On Fri, 31 Oct 2008 11:36:29 +0200 we received a third party complaint of invalid domain contact information in the Whois database for this domain Whenever we receive a complaint, we are required by ICANN regulations to initiate an investigation as to whether the contact data displaying in the Whois database is valid data or not. If we find that there is invalid or missing data, we contact both the registrant and the account holder and inform them to update the information.

Please note: ICANN (the Internet Corporation for Assigned Names and Numbers) regulations state that the WHOIS Administrative Contact may initiate and approve domain name registration transfers from your Network Solutions account to other Registrars. If you are not listed as the WHOIS Administrative Contact a transfer can occur without your knowledge if Domain Protect is not enabled for the domain name registrations listed above.

To change the WHOIS Administrative Contact Information for any of your domains, please login to Account Manager:

1. Log in to Account Manager at: http://www.networksolutions.com.  <- This links to a fake domain ending in “sys58.biz”
2. Click on the “Profile & Accounts” tab in the left navigation menu to be taken to a page listing your account details.
3. Click on “Accounts” and select the account you wish to edit.
4. Click “View/Edit WHOIS Contacts” to make your updates.

If you believe someone requested this change without your consent, please contact Customer Service.

If you would like to order additional services or to update your account, please visit us online.

Thank you for choosing Network Solutions. We are committed to providing you with the solutions, services, and support to help you succeed online.

Sincerely,
Network Solutions® Customer Support