Security & abuse

Phishing & impersonation

Emails, SMS, calls or websites impersonating Fesnorix to obtain credentials, codes or banking details. Write to reportphishing@fesnorix.com.

Service abuse

Spam, malware, denial-of-service attacks, abusive scanning or unlawful content hosted on our infrastructure. Write to abuse@fesnorix.com.

• It asks for passwords, verification codes or banking details; Fesnorix never requests these by email, SMS or phone.
• It conveys urgency or threatens immediate service suspension.
• The sender uses domains similar to, but not exactly, fesnorix.com.
• Links point to addresses different from the ones displayed on hover.
• It includes unexpected attachments or obvious writing errors.

For phishing: send the original message as an attachment (.eml or .msg) to preserve headers, or full screenshots showing sender, date and links. Do not reply, do not open attachments and do not enter credentials.

For abuse: provide the IP address or domain involved, date and time with time zone, full logs or headers, the affected URL and a description of the incident.

• Immediately change the affected passwords and enable two-step verification.
• Contact your bank if you provided payment details.
• Write to reportphishing@fesnorix.com stating what information was compromised.
• Keep the evidence in case you need to file a police report.

We acknowledge receipt within 24 hours. Critical incidents (active phishing, malware or ongoing attacks) are prioritised and may result in immediate suspension of the resource involved.

Depending on severity, we may require the client to remediate, filter traffic, block indicators, request takedown of fraudulent domains, temporarily suspend the service or terminate the contract. Fesnorix cooperates with the competent authorities under Spanish Act 34/2002 (LSSI-CE) and other applicable Spanish legislation.

You may also report to INCIBE (Spanish cybersecurity helpline 017) and to the National Police or Guardia Civil. For commercial complaints, use the complaints service. For internal regulatory breaches, the ethics channel.