Domisfera

Konstantinos Zournas recibió emails con una nueva estafa relacionada con dominios.

Los emails intentan meter miedo para que los receptores vayan a domaincop.net y se descarguen ficheros infectados.

El propietario de los dominios es acuasado de hacer spam y difundir malware e incluso es amenzado con acciones legales. Konstantinos supo rápidamente que era una estafa porque el dominio estaba en parking y no se usaba para enviar mails.

Los dominios domaincop.net / domaincorp.net / domaincop.org son de reciente creación y tienen whois privado.

Los emails eran así (sin links que llevan a malware):

from mail.domaincop.net (domaincop.net [37.61.222.140]) by ****** (Postfix) with ESMTP id ***** for <*******>; Tue, 22 Nov 2016 10:47:59 -0500 (EST)

by mail.domaincop.net id ***** for <******>; Tue, 22 Nov 2016 10:39:19 -0500 (envelope-from <isla-davis-**********@domaincop.net>)

Here is the complete email spam / scam message received:

From:Isla Davis <isla-davis@domaincop.net>

To:**********.org <**************>

Subject:Domain Abuse Notice: ********.org

Dear Domain Owner,

Our system has detected that your domain: *********.org is being used for spamming and spreading malware recently.
You can download the detailed abuse report of your domain along with date/time of incidents. Click Here*

We have also provided detailed instruction on how to delist your domain from our blacklisting.

Please download the report immediately and take proper action within 24 hours otherwise your domain will be suspended permanently.

There is also possibility of legal action depend on severity and persistence of your abuse case.

Three Simple Steps:
1. Download your abuse report.
2. Check your domain abuse incidents along with date and time.
3. Take few simple steps for prevention and to avoid domain suspension.

Click Here to Download your Report*

Please look into it and contact us.

Best Regards,
Domain Abuse Admin
DomainCop Inc.
Tel.: (139) 719-51-12