Domain Abuse Notice Icann-Monitor.org – SCAM

If you recently received an email from @icann-monitor.org titled Domain Abuse Notice: be aware this is a scam targeting suspecting domain name holders. While the email seems threatening, it certainly does not originate from the official Domain of ICANN and should be reported as SPAM to your email provider.

The email is similar to the example email below.

Dear Domain Owner,

Our system has detected that your domain: XXXXXX is being used for spamming and spreading malware recently.

You can download the detailed abuse report of your domain along with date/time of incidents. Click Here

We have also provided detailed instruction on how to delist your domain from our blacklisting.

Please download the report immediately and take proper action within 24 hours otherwise your domain will be suspended permanently.

There is also possibility of legal action depend on severity and persistence of your abuse case.

Three Simple Steps:

1. Download your abuse report.

2. Check your domain abuse incidents along with date and time.

3. Take few simple steps for prevention and to avoid domain suspension.

Click Here to Download your Report

Please look into it and contact us.

Best Regards,

Domain Abuse Dept.

ICANN Inc.

Tel.: (139) 789-50-45

Falsely representing an Incorporation is illegal and ICANN takes these types of misinterpretations extremely seriously. Report any suspicious emails like this directly to your domain registrar if you are uncertain.

By the way, the above email was received from Europe IP Range (RIPE) per our email headers.

Received: from mail.icann-monitor.org (icann-monitor.org [185.169.229.97])

Also of interesting note, there’s a List-Unsubscribe header tag!

List-Unsubscribe:

http://www.icann-monitor.org/superlative-simpler…>

Finally, icann-monitor.org does not render to an actual website…at this point.

NetRange:       185.0.0.0 - 185.255.255.255

CIDR:           185.0.0.0/8

NetName:        RIPE-185

NetHandle:      NET-185-0-0-0-1

Parent:          ()

NetType:        Allocated to RIPE NCC

OriginAS:      

Organization:   RIPE Network Coordination Centre (RIPE)

RegDate:        2011-01-04

Updated:        2011-02-08

ResourceLink:  whois.ripe.net

OrgName:        RIPE Network Coordination Centre

OrgId:          RIPE

Address:        P.O. Box 10096

City:           Amsterdam

StateProv:     

PostalCode:     1001EB

Country:        NL

RegDate:       

Updated:        2013-07-29

ReferralServer:  whois://whois.ripe.net

OrgTechHandle: RNO29-ARIN

OrgTechName:   RIPE NCC Operations

OrgTechPhone:  +31 20 535 4444

OrgAbuseHandle: ABUSE3850-ARIN

OrgAbuseName:   Abuse Contact

OrgAbusePhone:  +31205354444