warning FAKE ICANN Email - "Domain Abuse Notice"

[TestCase]

I received the email below purporting to be from ICANN. The email was sent from "Icann-Monitor.org". This domain was registered yesterday, December 28, 2016.

The subject line is: Domain Abuse Notice: "INSERT-DOMAIN-HERE.com"
The sender is: "Freddie White" <freddie.white [at] icann-monitor.org>

BE ALERT! Don't get hurt!!!

============ START SCAM EMAIL ==============

Dear Domain Owner,
Our system has detected that your domain: "INSERT-DOMAIN-HERE.com" is being used for spamming and
spreading malware recently.

You can download the detailed abuse report of your domain along with date/time of
incidents.

Click Here
We have also provided detailed instruction on how to delist your domain from our
blacklisting.

Please download the report immediately and take proper action within 24 hours
otherwise your domain will be suspended permanently.

There is also possibility of legal action depend on severity and persistence of
your abuse case.

Three Simple Steps:
1. Download your abuse report.
2. Check your domain abuse incidents along with date and time.
3. Take few simple steps for prevention and to avoid domain suspension.

Click Here to Download your Report
Please look into it and contact us.
Best Regards,
Domain Abuse Dept.
ICANN Inc.
Tel.: (139) 700-16-88

 

[Kate]

Got a similar mail. Scammers are so dumb, can't even write an E-mail that is remotely convincing.

 

[shaneisthename]

I had this sent to me recently, thanks for the info

 

[enlytend]

Not only spam, but if you click on those download links you will get infected with malware. Report it, delete it. DO NOT CLICK on anything.

 

[TestCase]

Not only spam, but if you click on those download links you will get infected with malware. Report it, delete it. DO NOT CLICK on anything.

Did all of the above the minute I saw it in my inbox.

 

[deez007]

Thanks for the heads up dude....

 

[Robert Cadra]

these are fake people...and try to scare you and wants to stop your business...

I was getting same kind of msgs...but i was ignoring it...

Few days back i got call regarding our product sales and partnership...basically to understand that how we
developing our product..

then i verify the user info it was matching with below info...
-------------------------------------------------------------------------------------------------------------------------------------------
Dear Domain Owner,
Our system has detected that your domain: "INSERT-DOMAIN-HERE.com" is being used for spamming and
------------------------------------------------------------------------------------------------------------------------------------------

so be careful...... from such bastard peoples...

 

[hale-xp]

thx for the info! btw.: the links in the email seem dead allready, at least mine lead to a "site not found" only, no malware installed.

 

[thekiller]

I accidentally clicked it.

It downloaded a VB script file. Had to reinstall Windows.

Always have antivirus, maybe Windows Defender.

 

[TestCase]

thx for the info! btw.: the links in the email seem dead allready, at least mine lead to a "site not found" only, no malware installed.

NC deleted/canceled the dn within 2-3 days of the first emails. They seem to be pretty responsive to these scams once they are notified of them.

I accidentally clicked it.

It downloaded a VB script file. Had to reinstall Windows.

Always have antivirus, maybe Windows Defender.

Sorry to hear they got you...

This scam has also been covered on some other blogs/news sites - though I think this thread was the first specifically noting this "ICANN" variation of the scam. At least 1 other "ICANN" domain seems to have been registered in conjuction with this email scam. Deez007 has a post elsewhere to one these stories, https://www.namepros.com/threads/domaincop-scammers-now-using-icann-inc.993311/