Dodgy domain renewal email doing the rounds
A phishing email from a gmail.com address is pushing a fake domain renewal notice to pressure you into acting fast.
You get an email with the subject line Action Required: Your Domain Renewal Is Due, appearing to be a domain or website provider chasing an urgent renewal. It looks like an account or billing prompt and is designed to make you act quickly to renew, confirm, or review your domain before it supposedly lapses.
The domain the message claims to be from. Fresh registrations and known-bad reputations are the strongest technical tells of a spoofed sender.
Practical steps you or your IT provider can take to reduce the risk from this kind of threat.
- Check: Verify your real domain renewal status by logging in through your registrar’s official website, not through any link in the email.
- Do not: Click links, open prompts, or reply to renewal emails that arrive from a free sender like gmail.com when they claim to represent a business service.
- Check: Treat this message with caution because the sending system could not verify who really sent it, and the email body was withheld, which means you should rely on trusted account records instead of the message itself.
- Report: Send the email to your IT provider or security team for review, especially if anyone clicked, replied, or entered account details.
- Contact Decision1: If you believe your business has been targeted, contact the Decision1 team immediately.
See what a genuine SiteHost message looks like, the real sender domain, the real link destination, and where to report a fake.