En resume me han insertado webs phishing y un organismo de seguridad ha denunciado a name.com. Y name me ha bloqueado los dominios (no me informó nada). Ahora me dicen que solucione el problema y me desbloquearán el dominio.
El equipo del VPS me ayudará a solucionarlo.
Aquí les dejo el email completo:
Thank you for your support of Name.com. We recently received a phishing complaint in regards to your domain iosyoutube.com.
The content in question was located at the following URLs:
Enlace eliminado
Enlace eliminado
After further review we found that this complaint is valid and the domains were resolving to content that is in breach of our registration agreement. We have included some additional information concerning these domains with this email for your reference. We have since placed a ‘hold’ on the domains. Once a ‘hold’ is placed on your domains they will cease to resolve to any URL or website.
If you are able to confirm the content has been removed and have taken steps to ensure that Name.com will not receive such complaints in the future, we are happy to remove the ‘hold’ as a courtesy. Please note that Name.com has received several complaints concerning the domains in your account resolving to content of this kind, should we continue to receive additional complaints we may be forced to take further action against the domains or your Name.com account.
Should you have any questions or concerns please let me know, I am happy to provide you with further assistance.
Thank you,
Ryan
Name.com Abuse Team
+1.720.249.2374
============
Email:
antiphishing@s21sec.com
Infringing Domain: fondos7.net
The above domains is:: phishing
Additional Information: To Whom It May Concern,
S21sec has been informed that there is currently a website hosted by your company that is involved in a phishing scheme to obtain personal account information from the customers of BBVA. S21sec has received numerous complaints and e-mails regarding the Web site listed below:
Enlace eliminado
Other pages involved in this phishing scheme include:
Enlace eliminado
We enclose below the legitimate url for BBVA:
www.bbva.es
According to published WHOIS and DNS data, the Web Site involved is owned and hosted by:
Address lookup
canonical name ybbvabbva.h19.ru.
aliases
addresses 89.108.66.32
Domain Whois record
Queried whois.ripn.net with "h19.ru"...
% By submitting a query to RIPN's Whois Service
% you agree to abide by the following terms of use:
%
Óñëîâèÿ ïîëüçîâàíèÿ óñëóãàìè (in Russian)
%
Terms of Use (in English).
domain: H19.RU
nserver: ns1.agava.net.ru.
nserver: ns2.agava.net.ru.
state: REGISTERED, DELEGATED, VERIFIED
org: AGAVA Software Ltd.
registrar: R01-REG-RIPN
admin-contact:
https://partner.r01.ru/contact_admin.khtml
created: 2004.10.11
paid-till: 2012.10.11
free-date: 2012.11.11
source: TCI
Last updated on 2012.06.26 12:55:46 MSK
Network Whois record
Queried whois.ripe.net with "-B 89.108.66.32"...
% Information related to '89.108.64.0 - 89.108.67.255'
inetnum: 89.108.64.0 - 89.108.67.255
netname: AGAVA-DATACENTER-NET
descr: AGAVA JSC
country: RU
admin-c: AN2353-RIPE
tech-c: AN2353-RIPE
status: ASSIGNED PA
mnt-by: AGAVA-MNT
mnt-lower: AGAVA-MNT
mnt-routes: AGAVA-MNT
changed:
slayer@agava.com 20100518
source: RIPE
role: AGAVA NOC
address: AGAVA JSC
address: B. Novodmitrovskaya str., 36/4
address: 127015 Moscow
address: Russia
phone: +7 495 4081790
phone: +7 495 4086755
fax-no: +7 495 4081790
remarks: ----------------------------------------------------
remarks: AGAVA is available 24 x 7
remarks: ----------------------------------------------------
remarks: Points of contact for AGAVA Network Operations
remarks: ----------------------------------------------------
remarks: Routing and peering issues:
noc@agava.com
remarks: SPAM and Network security issues:
abuse@agava.com
remarks: Customer support:
support@agava.com
remarks: ----------------------------------------------------
e-mail:
noc@agava.com
admin-c: AK305-RIPE
admin-c: ES5000-RIPE
admin-c: EVB152-RIPE
tech-c: AK305-RIPE
tech-c: ES5000-RIPE
tech-c: EVB152-RIPE
nic-hdl: AN2353-RIPE
mnt-by: AGAVA-MNT
changed:
slayer@agava.com 20120522
source: RIPE
% Information related to '89.108.64.0/21AS43146'
route: 89.108.64.0/21
descr: Agava HS
origin: AS43146
mnt-by: AGAVA-MNT
changed:
slayer@agava.com 20110915
source: RIPE
% This query was served by the RIPE Database Query Service version 1.12.4 (WHOIS2)
-- end --
Ryan
- - - Actualizado - - -
La puta madre, se han metido a mi servidor