3 ms·

Hi, This could be an instance of email spoofing. Can you check the headers of the email for any domains that look suspicious? What did the email say exactly?

Hi, This could be an instance of email spoofing. Can you check the headers of the email for any domains that look suspicious? What did the email say exactly? Why would a spamming domain be suspended in 72 hours instead of right away? If it actually is a legitimate "notice" and not email spoofing, you can try them on Twitter: https://twitter.com/Google https://twitter.com/Google Google has been responsive pretty much every time I have needed them, which is impressive. I tweeted a few days ago, not even tweeting "at" them, and they got in touch: https://twitter.com/jugurthahadjar/status/1430510105909501952 https://twitter.com/jugurthahadjar/status/143051010590950195...

ml-engineer 5y ago
The suspension notice was definitely sent by Google: From: registrar-support@google.com Subject: A message from Google Domains SPF: PASS with IP 209.85.220.75 DKIM: 'PASS' with domain google.com DMARC: 'PASS' The email said: Hi there, Your domain was reported for spamming activities and will be suspended in 3 days. ... It may result in cancellation of your domain registration or termination of your account. Regards, The Google Domains Support Team --- So far the experience has been exactly the same as how Gitbook described their similar situation: https://blog.gitbook.com/tech/post-mortems/06-20-gitbook-domains-blocked-by-registrar https://blog.gitbook.com/tech/post-mortems/06-20-gitbook-dom.... No one at Google would answer any questions. And we have no idea what to do right now.
- Jugurtha 5y ago
  Emails in email spoofing definitely show a legitimate domain in "From"; it wouldn't be fun otherwise. Look at the headers. All the domains in the many "Received" fields, "Return-Path", etc. Look not for signs it is authentic; look for signs it is not. Also: https://developers.google.com/domains/express/support https://developers.google.com/domains/express/support
  - ml-engineer 5y ago
    Sure, we did reach out to Google Domains support team. They acknowledged the case as valid, however, could not answer any questions about it (because it is being handled by the compliance team). We spoke with 5 different agents so far.

ml-engineer 5y ago

The suspension notice was definitely sent by Google: From: registrar-support@google.com Subject: A message from Google Domains SPF: PASS with IP 209.85.220.75 DKIM: 'PASS' with domain google.com DMARC: 'PASS' The email said: Hi there, Your domain was reported for spamming activities and will be suspended in 3 days. ... It may result in cancellation of your domain registration or termination of your account. Regards, The Google Domains Support Team --- So far the experience has been exactly the same as how Gitbook described their similar situation: https://blog.gitbook.com/tech/post-mortems/06-20-gitbook-domains-blocked-by-registrar https://blog.gitbook.com/tech/post-mortems/06-20-gitbook-dom.... No one at Google would answer any questions. And we have no idea what to do right now.

Jugurtha 5y ago
Emails in email spoofing definitely show a legitimate domain in "From"; it wouldn't be fun otherwise. Look at the headers. All the domains in the many "Received" fields, "Return-Path", etc. Look not for signs it is authentic; look for signs it is not. Also: https://developers.google.com/domains/express/support https://developers.google.com/domains/express/support
- ml-engineer 5y ago
  Sure, we did reach out to Google Domains support team. They acknowledged the case as valid, however, could not answer any questions about it (because it is being handled by the compliance team). We spoke with 5 different agents so far.