Virus in false “suspension notice”

We have received several reports from clients who had received an e-mail claiming their domain name to be suspended. It looks like not just our clients are being targeted, as we are seeing other registrars sending out similar warnings.

The e-mail seems to come from the abuse contact in the public whois of your domain name (something like law-enforcement-only@NameWeb.biz for example), but is actually sent by spammers who try to send you a virus.

The e-mail looks something like this:

 

Subject: Domain [your domain name] Suspension NoticeDear Sir/Madam,

The following domain names have been suspended for violation of the 
 NameWeb BVBA Abuse Policy:
 Domain Name: [your domain name]
 Registrar: NameWeb BVBA
 Registrant Name: [your name]
 Multiple warnings were sent by NameWeb BVBA Spam and Abuse Department to 
 give you an opportunity to address the complaints we have received.
 We did not receive a reply from you to these email warnings so we then 
 attempted to contact you via telephone.
 We had no choice but to suspend your domain name when you did not 
 respond to our attempts to contact you.
 Click here and download 
 <[link to virus infected file]>a copy of 
 complaints we have received.
 Please contact us for additional information regarding this notification.
 Sincerely,
 NameWeb BVBA
 Spam and Abuse Department
 Abuse Department Hotline: 480-436-7499

 

If you receive such an e-mail, simply delete it instantly. Do NOT click on the link in the e-mail!