# WARNING: Phishing scam targeting Nachi Members **URL:** \ **Category:** Misc. Discussion\ **Created:** [March 18, 2018, 4:58am UTC](https://forum.nachi.org/t/warning-phishing-scam-targeting-nachi-members/122746 "2018-03-18T04:58:59Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![aprice3](https://sea2.discourse-cdn.com/internachi/user_avatar/forum.nachi.org/aprice3/32/57948_2.png) [@aprice3](https://forum.nachi.org/u/aprice3)\ **Post date:** [March 18, 2018, 4:58am UTC](https://forum.nachi.org/t/warning-phishing-scam-targeting-nachi-members/122746/1 "2018-03-18T04:58:59Z")
Hello - I am a brand new Nachi member - just signed up a few days ago. Last night I got an email that is clearly a phishing scam. It claims to be from the “InterNACHI Security Team” and says that I need to “_follow the instructions and fill verification form to re-activate your InterNACHI membership_” The link redirects to [InterNACHI Member Verification – My Blog](https://www.nachischool.org/internachi-member-verification/) which contains a request for Name, Email address, NACHI username and credit card information. (Screenshot Attached) Obvious phishing, obviously targeted at NACHI members. Since I received this within 48 hours after signing up, I suspect it is targeted at new NACHI members. Also - Hello everyone. ![screenshot_146.png](https://global.discourse-cdn.com/internachi/original/3X/5/1/5184fe0d1ef88621169c96aed69291ae970bc3c9.png) ---
**Author:** ![cevans](https://sea2.discourse-cdn.com/internachi/user_avatar/forum.nachi.org/cevans/32/244194_2.png) [@cevans](https://forum.nachi.org/u/cevans)\ **Post date:** [March 18, 2018, 5:40am UTC](https://forum.nachi.org/t/warning-phishing-scam-targeting-nachi-members/122746/2 "2018-03-18T05:40:25Z")
That’s a first. Contact Nick at [fastreply@nachi.org](mailto:fastreply@nachi.org) and let him know. Someone has created a fake domain mimicking [nachi.org](http://nachi.org). Nick needs to have it shut down. Domain Name: [NACHISCHOOL.ORG](http://NACHISCHOOL.ORG) Registry Domain ID: D402200000004528586-LROR Registrar WHOIS Server: [whois.namesilo.com](http://whois.namesilo.com) Registrar URL: [Cheap Domain Names-Domain Name Registration-Transfer-Renewal: NameSilo](http://www.namesilo.com) Updated Date: 2018-03-14T14:27:15Z Creation Date: 2017-12-12T09:36:17Z Registry Expiry Date: 2018-12-12T09:36:17Z Registrar Registration Expiration Date: Registrar: Namesilo, LLC Registrar IANA ID: 1479 Registrar Abuse Contact Email: [abuse@namesilo.com](mailto:abuse@namesilo.com) Registrar Abuse Contact Phone: +1.4805240066 ---
**Author:** ![wogletree](https://sea2.discourse-cdn.com/internachi/user_avatar/forum.nachi.org/wogletree/32/58250_2.png) [@wogletree](https://forum.nachi.org/u/wogletree)\ **Post date:** [March 18, 2018, 8:04pm UTC](https://forum.nachi.org/t/warning-phishing-scam-targeting-nachi-members/122746/3 "2018-03-18T20:04:56Z")
Good catch, Adam. Thanks! ---
**Author:** ![inxilpro](https://sea2.discourse-cdn.com/internachi/user_avatar/forum.nachi.org/inxilpro/32/415637_2.png) [@inxilpro](https://forum.nachi.org/u/inxilpro)\ **Post date:** [March 19, 2018, 2:21pm UTC](https://forum.nachi.org/t/warning-phishing-scam-targeting-nachi-members/122746/4 "2018-03-19T14:21:38Z")
We’re working with the company that this site is hosted with to have it shut down. An Indonesian hacker has been targeting home inspectors with emails like this over the last few months. So far we’ve been able to get each site he sets up shut down, but he keeps on popping up. Always check to make sure you’re on [NACHI.ORG](http://NACHI.ORG) if you click a link in an email that appears to be from InterNACHI. Also, due to the nature of the underlying email protocols, it’s possible to fake the “From” address on messages, so it’s possible that these messages will look like they’re coming from an @nachi.org or @internachi.org email address. Always be careful when you receive an email that’s suspicious, even it parts of it look legitimate. CM