Hello!
Unfortunately, many unscrupulous companies and individuals exploit email for personal gain, sometimes even to test deliverability. This often involves fraudulent messages that dangle suspicious offers in an attempt to harvest personal information.
Recorded Future, a cybersecurity company, named the following domains as potentially dangerous:
- coronavirusstatus[.]space
- vaccine-coronavirus[.]com
- coronavirus[.]cc
- coronavirus[.]app
- coronavirusaware[.]xyz
- coronavirus-map[.]com
- survivecoronavirus[.]org
- blogcoronacl.canalcero[.]digital
- coronavirus-realtime[.]com
What Are Phishing Emails?
Some organizations or individuals with questionable motives seek to obtain users’ personal data for subsequent fraudulent activity. They achieve this through large-scale email campaigns in which they impersonate well-known brands.
These messages typically contain a direct link to a fraudulent website that closely mimics the authentic one. Clicking the link leads to a landing page prompting visitors to enter usernames, passwords, or even credit-card details.
Types of Coronavirus Scam Emails
Phishing attacks pose serious risks and can result in millions of dollars in losses for affected organizations. Below we examine the main types of coronavirus-related phishing campaigns currently circulating.
#1 Advertising of Individual Testing Products or Medicines
A widespread scam involves “advertising” messages offering express COVID-19 tests at suspiciously low prices. Managers worldwide have also reported receiving dubious emails promoting supposedly effective medications to protect employees. Some of these messages include fabricated quotes from immunologists endorsing the products.
These emails are designed to collect as much personal data as possible. Law-enforcement agencies, including the FBI, continue to pursue such fraudsters aggressively. Remember: if an offer sounds too good to be true—especially anything advertised as “free”—it is almost certainly a scam. No medication currently exists that can reliably prevent coronavirus infection.
#2 Email with COVID Test Results
According to Statista, at the end of February 2026 more than 348 million COVID-19 tests had been conducted in the United States. People awaiting recent results have become prime targets for phishing campaigns disguised as test-result notifications.
Recipients are directed to “view their personal health records” via links that silently install malware designed to harvest sensitive information. If you are expecting test results, always verify the delivery method and timing directly with the medical facility where the test was performed.
#3 Vaccination Invitation
Since the beginning of 2026, vaccination against coronavirus has continued across the United States. Appointments are made exclusively through official state websites, with priority given to individuals at higher risk—those over 65, healthcare workers, teachers, civil servants, and law-enforcement personnel.
Scammers exploit the high demand by sending emails promising early access to vaccines in exchange for personal data. Legitimate government resources always end in .gov; any other domain should be treated as suspicious.
#4 Fake World Health Organization Phishing Email
Messages impersonating the World Health Organization remain common. Because the WHO is widely trusted, recipients are less likely to question the sender. Always examine the “From” address: legitimate WHO communications come from official domains and never contain unusual numbers or symbols.
#5 Email Deliverability Check and Coronavirus Scam
Some online platforms and e-commerce sites attempt to boost engagement by sending spam containing links that redirect to data-harvesting pages. These messages often promise “breaking news” or sensational content that requires registration. Obtain information only from trusted outlets such as The Washington Post, The Wall Street Journal, The New York Times, BBC, and Forbes.
#6 Email With a Call for Charity
Emails describing dire situations in developing countries and requesting small donations ($5–$10) frequently exploit emotion. The COVAX program, coordinated by the World Health Organization, is the only official global initiative of this kind, and it never solicits donations via unsolicited email.
Tips to Escape From Internet Phishers
Email scams rely on psychological manipulation. Use the following practices to stay protected:
- Be suspicious of any message offering free services or urgent action. Verify information only through official government or WHO channels.
- Ignore “limited-time” offers that sound too good to be true; genuine high-value products are never sold at unrealistically low prices.
- Never provide personal or financial details in response to an unsolicited email. If you suspect you have shared sensitive information, contact your bank immediately.
- Delete messages that do not address you by name; legitimate correspondents will know your identity.
- Keep devices protected with up-to-date antivirus and anti-spam software, and remove suspicious messages promptly.
Also read:
How Can I Check Email Deliverability for My Business?
Some marketers suggest sending test messages disguised as brand offers to verify deliverability. Even when the linked page does not collect data, such practices damage sender reputation and are strongly discouraged.
Instead, implement proper email-authentication protocols—DMARC, DKIM, BIMI, and SPF record checks—to add security layers and reduce the risk of phishing or spoofing attacks.
Never resort to deceptive testing methods. If deliverability issues persist, consult experienced marketing professionals who follow ethical best practices.
Thank you!
Join us on social media!
See you!
