Beware Fake Domain Renewals - Again

Companies are still trying to ’slam’ web customers into changing Registrars

As we alerted you back in May of 2018, there are many unscrupulous companies out there that are trying to take over your domain. What they'll do with it at that point, we don't know.

There is another wave of emails going out to many Montague WebWorks customers, sending them emails that look like the attached image. These are not even registrars. They've found your email address on your website, and are sending you a "DOMAIN SERVICE EXPIRATION NOTICE" with an expiration date that has nothing to do with your domain name or even your hosting.

They include the following text on the notice:

Dear [customer name],

This information is intended for the use of the individual(s) named above. Failure to complete your domain service name registration by 10.02.2018 will may result in account suspension (making it difficult for your customers and friends to locate you, using search engines on the web). You must renew your domain name to retain exclusive rights to it on the Web. You can take advantage of our best savings.

and, below that, they include the following in very, very tiny, grey text:

PLEASE NOTE:

This Email contains information intended only for the individuals or entities to which it is addressed. If you are not the intended recipient or the agent responsible for delivering it to the intended recipient, or have received this Email in error, please notify immediately the sender of this Email at the Help Center and then completely delete it. Any other action taken in reliance upon this Email is strictly prohibited, including but not limited to unauthorized copying, printing, disclosure, or distribution. We do not directly register or renew domain names. This is not a bill or an invoice. This is a optimization offer for your webside. You are under no obligation to pay the amount stated unless you accept this purchase offer. Promotional material is stricly along the guidelines oft he can-spam act of 2003. They are in no way misleading. You have received this message because you elected to recieve notificaton offers. Unsubscribe here if you no longer wish to receive our notifications. Thank you for your cooperation.

There is a link on the text "Unsubscribe here", which leads to: http://ms919.suppblue.pw/em/link.php

The domain name suppblue.pw is registered through NameCheap.com to an unnamed entity. The .PW top level domain is for the country of Palau, but we seriously doubt there is a company in Palau called SuppBlue.

The email came from Service-Team .

The domain name rwspc.org comes up with nothing, as does suppblue.pw

Please let us know if you're contacted by anyone asking you to pay an invoice for your domain name unless it's GoDaddy, Network Solutions, or other legal registrars. Especially if WE hold your domain name.

ETERNAL VIGILANCE