Spam emails regarding Domain Abuse Notices

Solution 1:

This is spam at the least - at worst, it's a scam. Do not agree to send a read receipt. Do not download unnecessary content. Do not click links. Do not reply. Do not pass Go... etc.

As others have mentioned, protecting your contact details in whois information may help eliminate these emails; I'd also like to add some common signs of spam/scam emails:

  • "Dear <generic name>"
    Legitimate organisations will attempt to use your real name where they can - for example, by taking it from whois information, or by contacting your domain registrar to obtain your name and contact details.
  • "Click Here"
    Legitimate (especially formal, like this) emails are drafted by people who are paid to come up with something better than "click this" for link text - "visit our website to retrieve the full report", perhaps.
  • Bad grammar
    Legitimate emails are written by people who are paid to write good English - and then they're copy-checked before they ever get sent out. "There is also possibility", "depend on severity", and Unnecessary Capital Letters are generally not things that make it into professional communications.
  • Legal threats
    People are more likely to get scared and do what the scammers want them to if they're threatened with things they don't understand, like legal proceedings - even if the threats aren't actionable.
  • Unreasonable time limits
    If a legitimate organisation needs to time-limit you, it'll be on a scale of weeks, or multiple days at the very shortest. It's highly unusual to be given just 24 hours to perform some action - unless, of course, someone wants to scare you into taking action without thinking about it first.
  • Unexpected attachment types
    Attachments such as official reports will usually come as PDFs, or a link to a legitimate webpage. Anything else - an RTF, a Word document, a HTML file, or an executable, should raise a question.

None of these are 100% perfect indicators of scams, but each should raise a small flag - and the presence of multiple should make you highly suspicious. If in doubt, verify the organisation is legitimate, look up a contact email address for them (not the address the email came from, usually), and use that to ask if the email is legitimate. If it is, fine - if it's not, you've done them a favour.

Solution 2:

This is some attempt to spam/phish/infect with malware. Just delete it and carry on.

There is no real way to avoid this crap, but you have your full contact information including mail in the domain record - this makes this extra easy ...


Solution 3:

If you go to mxtoolbox, and check your domain for blacklisting, it doesn't return as listed on any at this time.

You can check for blacklisting on:

http://mxtoolbox.com/blacklists.aspx

If you check domain info, you can see domain icann-monitor.org was registered yesterday, so is definitely not a genuine abuse notice.

http://whois.domaintools.com/icann-monitor.org

Dates   Created on 2016-12-28 - Expires on 2017-12-28 - Updated on 2016-12-29     
Domain Status   Never Registered Before

If you search domain info for your domain, you can see your gmail address, which is how they targeted your email.

You can use WhoisGuard or some other domain/whois privacy tool, to not have your mail published publicly like that, if you are concerned about it being available publicly.


Solution 4:

just disregard and delete DO NOT open attachments. I've received same messages like "Third Invoice Overdue Notice for xxx.com" or "Final Domain Abuse Notice: xxx.com" from domains like "@ccnotice.net", "@domaincop247.com", "@domaincops.net"