Beware of fake Domain Suspension Notice emails

Beware of fake Domain Suspension Notice emails that claim to be sent from Google (Google Inc.). The emails usually target domain owners who have domain names registered by Google Domains.

fake Google Domain Suspension Notice emails

The fraudulent email message claims that Google has suspended your domain for a violation of the Google Inc. Abuse Policy. However, this is not true. The email is used to spread malware and is in no way associated with Google Inc. and Google Domains.

The email states that multiple warnings were sent by Google Inc. Spam and Abuse Department to give you an opportunity to address the complaints they received and that they did not receive a reply from you.

The message claims that they no choice but to suspend your domain name when you did not respond to their alleged attempts to contact you.

The email contains a link to download a “copy of complaints” they received. The downloadable file is actually dangerous and can spread malware across your computer – so don’t click the link in the email. The link will place several malicious application type files in different areas on your computer.

Known file

  • bg6504da.exe

Known paths

  • C: bg6504da
  • Start Menu > Programs > Startup
  • AppData > Roaming

Fake Domain Suspension Notice email

Domain example.com Suspension Notice
Google Inc. <"registrar-abuse [at] google.com.org"@mailfw.whoisproxy.com>
to ee60950cce9044.
Why is this message in Spam? We've found that lots of messages from mailfw.whoisproxy.com are spam.  Learn more
Dear Sir/Madam,
The following domain names have been suspended for violation of the Google Inc. Abuse Policy:
Domain Name: example.com
Registrar: Google Inc.
Registrant Name: On behalf of example.com OWNER
Multiple warnings were sent by Google Inc. Spam and Abuse Department to give you an opportunity to address the complaints we have received.
We did not receive a reply from you to these email warnings so we then attempted to contact you via telephone.
We had no choice but to suspend your domain name when you did not respond to our attempts to contact you.
Click here and download a copy of complaints we have received.
Please contact us for additional information regarding this notification.
Sincerely,
Google Inc.
Spam and Abuse Department
Abuse Department Hotline: 480-203-2464

Sean Doyle

http://Botcrawl.com

Sean Doyle is an engineer from Los Angeles, California. Sean's primary focuses include Internet Security, Web Spam, and Online Marketing.