Spam alert: WHOIS Contact Information

[stig]

I'm not sure if this is the best ubuntu forum to post this but here goes.

I just wanted to warn other people because I received a very convincing email today purporting to be from Network Solutions and titled:

"Your WHOIS Contact Information :: Confirmation"

It reads in a convincing way and requires me to confirm my recent new domain name. Also says it might be cancelled if I do not confirm it. Usually I delete everything that seems like spoofs, pfishing etc. But this looked so right and fitted so well that I nearly clicked on the links...until I saw the link address started with info1.networksolutions.com which made me suspicious.

I contacted the abuse team at my ISP and they replied:

"On first glance it does look relatively legit however the IP it came
from 64.14.86.250 is registered to:

OrgName: E-Dialog
OrgID: EDIAL-1
Address: 131 Hartwell Avenue
Address: ATTN Accounts Payable
City: Lexington
StateProv: MA
PostalCode: 02421
Country: US

and info1.networksolutions.com resolves to 64.28.75.210 which is
assigned to the same organisation.

Furthermore, viewing (suggest you don't try this though) the index page
located at info1.networksolutions.com brings up the default 'you have
successfully installed Apache' page which is extremely unlikely for an
organisation such as NetSol."

[puppy]

That's interesting - according to their homepage (and other sources) E-Dialog do marketing for British Airways amongst others, so they don't appear to be a spammer... what gives?

[stig]

That's interesting - according to their homepage (and other sources) E-Dialog do marketing for British Airways amongst others, so they don't appear to be a spammer... what gives?

I've emailed Network Solutions about the message and await a reply.