Phishing Email Impersonating 1st Domains

Update timeline

1. identified Jan 20, 2026, 08:58 PM UTC

   We’re experiencing a service outage with the listed services.
We apologise for any inconvenience and will provide further updates as we work to restore normal service. Symptoms: We are seeing an active phishing email campaign targeting customers. The emails are being sent from the address [email protected] (note the misspelling) and did not originate from 1st Domains or any of our systems. There is no evidence of a security breach at this time. Recommended user actions: If customers report receiving this email: Advise them not to click any links, open attachments, or reply to the message Instruct them to delete the email immediately Reassure them that the email is fraudulent and not associated with our services We are continuing to monitor and investigate the activity and will provide updates if further action is required.

2. monitoring Jan 21, 2026, 01:19 AM UTC

   The issue has been resolved. Our team will keep a close eye on things to make sure everything stays stable. Thank you for your patience! Symptoms: We are seeing an active phishing email campaign targeting customers. The emails are being sent from the address [email protected] (note the misspelling) and did not originate from 1st Domains or any of our systems. There is no evidence of a security breach at this time. Recommended user actions: If customers report receiving this email: Advise them not to click any links, open attachments, or reply to the message Instruct them to delete the email immediately Reassure them that the email is fraudulent and not associated with our services We are continuing to monitor and investigate the activity and will provide updates if further action is required.

3. monitoring Jan 21, 2026, 01:24 AM UTC

   The issue has been resolved. Our team will keep a close eye on things to make sure everything stays stable. Thank you for your patience! Symptoms: Update - We are seeing an active phishing email campaign targeting customers. The emails are being sent from the address [email protected] (note the misspelling) and did not originate from 1st Domains or any of our systems. There is no evidence of a security breach at this time. Recommended user actions: If customers report receiving this email: Advise them not to click any links, open attachments, or reply to the message Instruct them to delete the email immediately Reassure them that the email is fraudulent and not associated with our services We are continuing to monitor and investigate the activity and will provide updates if further action is required.

4. monitoring Jan 21, 2026, 01:47 AM UTC

   The issue has been resolved. Our team will keep a close eye on things to make sure everything stays stable. Thank you for your patience! Symptoms: We are seeing an active phishing email campaign targeting customers. The emails are being sent from the address [email protected] (note the misspelling) and did not originate from 1st Domains or any of our systems. There is no evidence of a security breach at this time. Recommended user actions: If customers report receiving this email: Advise them not to click any links, open attachments, or reply to the message Instruct them to delete the email immediately Reassure them that the email is fraudulent and not associated with our services We are continuing to monitor and investigate the activity and will provide updates if further action is required.

5. monitoring Jan 21, 2026, 08:44 PM UTC

   Service appears to be fully restored. We’ll continue to keep a close eye on things to ensure continued stability. Thank you for your patience!

6. resolved Jan 21, 2026, 08:45 PM UTC

   This incident has been resolved.