The Gandi Community

Phishing scam underway

Several phishing scams are currently in progress. They are targeting thousands of domain name owners who have registered domains through registrars around the world (including GANDI).

These emails claim that your domain name has been suspended, and asks you to click on a link to download a copy of the complaints.

DO NOT CLICK on the the link or download the document: it contains a virus!

It seems that those responsible for sending these emails use the information obtained from the public WHOIS domain name database, where they recover the name, email address, and name of the registrar associated with the domain.

The fraudulent emails can even appear to come directly from GANDI. Here is one example:

————

Subject: Domain Name exemple.com have been suspended

From:      GANDI SAS

Message: Dear First Lastname,

The Domain Name example.com have been suspended for violation of the
GANDI SAS Abuse Policy.

Multiple warnings were sent by GANDI SAS Spam and Abuse Department to give
you an opportunity to address the complaints we have received.

We did not receive a reply from you to these email warnings so we then
attempted to contact you via telephone.

We had no choice but to suspend your domain name when you did not respond to
our attempts to contact you.

Click here and
download a copy of complaints we have received.

Please contact us for additional information regarding this notification.

Sincerely,

GANDI SAS

Spam and Abuse Department

————

You should ignore this email. It is not necessary to send it to us: we have recieved dozens over the past few days and our teams are already on it.

 

Thank you for your attention.