From: Cpanel on brendinghat.com <noreply@serversettings.com>
Date: 16 Jul 2019 08:41:05 -0700
Subject: Your password is set to expire in 3 days
Dear nigel,
Your Email Account (nigel@brendinghat.com) password is set to
expire in 3 days, it will expire on.
19 JUL 2019.
We recommend you to click the Email Settings below to confirm your
email password to avoid login interruptions.
Email Setings
Best Regards,
NOTE:_Please do not ignore this message._
Copyright 2019. cPanel, Inc brendinghat.com account team.
Why does GoDaddy facilitate these scam artists?
I pulled the whois information:
Domain: serversettings.com
Registrar: GoDaddy.com, LLC
Registered On: 2007-12-15
Expires On: 2020-12-15
I reported the phishing to abuse@godaddy.com and they advised they would investigate. 5 days later and I get another phishing email from serversettings.com
To me, this exposes GoDaddy to suits for willful negligence for allowing a phishing operator to continue after they were aware of what they were doing. Anyone who gets tricked, should now be in a good position to claim compensation from GoDaddy through legal recourse.
The problem is that it is very easy to forge an Email. It may look like it came from serversettings.com but it could be whoever the scammer feels like impersonating. Whoever owns serversettings.com may be totally unaware of the Emails being sent in their name. In reality, there is not much they can do to stop it happening.
We were able to examine the “behind the scenes” record for the Email we published – Our hypothesis is that the scammer had a hacked login to a legitimate mail server, which on this occasion happened to be in iran. With an account on a trusted mail server, they would be then free to send whatever they liked.