{"id":9871,"date":"2026-08-10T23:02:21","date_gmt":"2026-08-10T21:02:21","guid":{"rendered":"https:\/\/www.lrob.fr\/?p=9871"},"modified":"2026-08-10T23:02:22","modified_gmt":"2026-08-10T21:02:22","slug":"phishing-emails-impersonating-lrob-stay-vigilant","status":"publish","type":"post","link":"https:\/\/www.lrob.fr\/en\/blog\/actu-lrob\/faux-emails-usurpant-lrob-restez-vigilants\/","title":{"rendered":"Fake emails impersonating LRob: remain vigilant"},"content":{"rendered":"<p class=\"wp-block-paragraph\">Several clients have reported receiving an email claiming to be from LRob, announcing the imminent expiration of their domain name and demanding \u00aburgent action.\u00bb.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Warning: this email does not originate from LRob<\/strong>. This is a phishing attempt aimed at collecting your data or your money.<\/p>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n<h2 class=\"wp-block-heading\">What does this illegitimate email look like?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Here are two concrete examples, the first of which is provided by our dear partner <a href=\"https:\/\/www.numericatous.fr\/\" target=\"_blank\" rel=\"noopener\">Numericatous, who helps you switch to Linux<\/a>.<\/p>\n\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-794e3cfa wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<figure data-wp-context=\"{&quot;imageId&quot;:&quot;6a7af8228298d&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6a7af8228298d\" class=\"wp-block-image size-large wp-lightbox-container\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"531\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"https:\/\/www.lrob.fr\/wp-content\/uploads\/2026\/08\/imprersonation-lrob-1024x531.png\" alt=\"\" class=\"wp-image-9872\" srcset=\"https:\/\/www.lrob.fr\/wp-content\/uploads\/2026\/08\/imprersonation-lrob-1024x531.png 1024w, https:\/\/www.lrob.fr\/wp-content\/uploads\/2026\/08\/imprersonation-lrob-300x156.png 300w, https:\/\/www.lrob.fr\/wp-content\/uploads\/2026\/08\/imprersonation-lrob-150x78.png 150w, https:\/\/www.lrob.fr\/wp-content\/uploads\/2026\/08\/imprersonation-lrob-768x398.png 768w, https:\/\/www.lrob.fr\/wp-content\/uploads\/2026\/08\/imprersonation-lrob-600x311.png 600w, https:\/\/www.lrob.fr\/wp-content\/uploads\/2026\/08\/imprersonation-lrob.png 1026w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewbox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><figcaption class=\"wp-element-caption\">Phishing email example<\/figcaption><\/figure>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<figure data-wp-context=\"{&quot;imageId&quot;:&quot;6a7af82283e33&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6a7af82283e33\" class=\"wp-block-image size-large wp-lightbox-container\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"934\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"https:\/\/www.lrob.fr\/wp-content\/uploads\/2026\/08\/usurpation-lrob2-nosensitive-1024x934.png\" alt=\"\" class=\"wp-image-9873\" srcset=\"https:\/\/www.lrob.fr\/wp-content\/uploads\/2026\/08\/usurpation-lrob2-nosensitive-1024x934.png 1024w, https:\/\/www.lrob.fr\/wp-content\/uploads\/2026\/08\/usurpation-lrob2-nosensitive-300x274.png 300w, https:\/\/www.lrob.fr\/wp-content\/uploads\/2026\/08\/usurpation-lrob2-nosensitive-150x137.png 150w, https:\/\/www.lrob.fr\/wp-content\/uploads\/2026\/08\/usurpation-lrob2-nosensitive-768x700.png 768w, https:\/\/www.lrob.fr\/wp-content\/uploads\/2026\/08\/usurpation-lrob2-nosensitive-600x547.png 600w, https:\/\/www.lrob.fr\/wp-content\/uploads\/2026\/08\/usurpation-lrob2-nosensitive.png 1248w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewbox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><figcaption class=\"wp-element-caption\">Example of identity spoofing Lrob\u00ab<\/figcaption><\/figure>\n<\/div>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\">Key points:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Sender<\/strong> an address not ending <strong>not<\/strong> even <code>lrob.fr<\/code> (e.g. <code>hi@mastoturk.org<\/code>)<\/li>\n\n\n\n<li><strong>Object<\/strong> \u00abReminder: Regarding your-domain.fr\u00bb or \u00abReminder: votresite.tld \u2013 Renewal follow-up\u00bb<\/li>\n\n\n\n<li><strong>Content<\/strong> a fake domain expiration date and an \u00abAction: Urgent\u00bb mention to push you to act without thinking<\/li>\n\n\n\n<li><strong>Telling details<\/strong> : <strong>absence of logo<\/strong> and \u00abLrob\u00bb misspelled (in all official communication, <strong>LRob<\/strong> is always spelled with the <strong>Capital L and R<\/strong>).<\/li>\n<\/ul>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\" style=\"margin-top:var(--wp--preset--spacing--50);margin-bottom:var(--wp--preset--spacing--50)\">\n<h2 class=\"wp-block-heading\">How to detect and avoid phishing: best practices<\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>Always check the sender's email address<\/strong>, not just the display name (which can be fake). LRob's official emails always end with <code>@lrob.fr<\/code>.<\/li>\n\n\n\n<li><strong>Do not click on any links<\/strong> in a suspicious email.<\/li>\n\n\n\n<li><strong>Go directly to the official website<\/strong> by typing the address www.lrob.fr yourself and checking your subscriptions directly in the customer portal.<\/li>\n\n\n\n<li><strong>If you have any doubts, contact us<\/strong> through official support. Better one question too many than one payment too many.<\/li>\n\n\n\n<li><strong>Check the true expiration date of your domain<\/strong> via <a href=\"https:\/\/www.lrob.fr\/en\/domain-info\/\">our whois tool<\/a>.<\/li>\n\n\n\n<li><strong>Always beware of urgency.<\/strong> The feeling of panic is a powerful tool to push one into a poor judgment.<\/li>\n\n\n\n<li><strong>Never pay<\/strong> Do nothing in response to an email until you have verified that it is indeed legitimate and corresponds to your service. Also, regarding LRob, renewals must always be processed through the client area, by credit card or direct debit; or in rare cases (local authorities\/Chorus), via a manual invoice preceded by a clear quote, following a human exchange.<\/li>\n<\/ol>\n<\/div>\n\n\n\n<h2 class=\"wp-block-heading\">How do these impostors operate?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Impostors use your public email address (usually displayed on your site) along with the legal notice and\/or registrar information to try to make their scam credible. This gives you one more good reason not to display your email inbox publicly (outside of an address dedicated to the legal notice) and to prefer a contact form. See: <a href=\"https:\/\/www.lrob.fr\/en\/blog\/emails-6-preventive-tips-to-never-receive-spam\/\">Emails: 6 preventive tips to never receive spam<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In most of the cases identified, the domain name is not even registered through LRob, further reinforcing the impossibility that such an email could be legitimate. Here too, a reminder that it is important to know where your data is hosted.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Victim of its own success?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">If hackers go to the trouble of impersonating the name LRob, it means LRob is starting to become well-known. It is sort of the price of fame. The attackers rely on public data: the host's name visible in the legal notices or domain registration information (whois), and sometimes your email address displayed on your own site. Nothing was hacked at LRob or at your place\u2014just the exploitation of information accessible to everyone.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Did you receive this email?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Nothing to do other than throw it in the trash (or report it as spam to help the filters). If you clicked on a link or shared information, contact us quickly and change your passwords.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Thank you and well done to our vigilant customers who report these attempts to us: that's the right reflex! \ud83d\udc4d<\/p>","protected":false},"excerpt":{"rendered":"<p>Plusieurs clients nous ont signal\u00e9 avoir re\u00e7u un email pr\u00e9tendant provenir de LRob, annon\u00e7ant l&rsquo;expiration imminente de leur nom de domaine et r\u00e9clamant une \u00ab action urgente \u00bb. Attention : cet email n&rsquo;\u00e9mane pas de LRob. Il s&rsquo;agit d&rsquo;une tentative de phishing (hame\u00e7onnage) visant \u00e0 r\u00e9colter vos donn\u00e9es ou votre argent. \u00c0 quoi ressemble cet [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":9872,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[39],"tags":[],"class_list":["post-9871","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-actu-lrob"],"_links":{"self":[{"href":"https:\/\/www.lrob.fr\/en\/wp-json\/wp\/v2\/posts\/9871","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.lrob.fr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.lrob.fr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.lrob.fr\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.lrob.fr\/en\/wp-json\/wp\/v2\/comments?post=9871"}],"version-history":[{"count":1,"href":"https:\/\/www.lrob.fr\/en\/wp-json\/wp\/v2\/posts\/9871\/revisions"}],"predecessor-version":[{"id":9874,"href":"https:\/\/www.lrob.fr\/en\/wp-json\/wp\/v2\/posts\/9871\/revisions\/9874"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.lrob.fr\/en\/wp-json\/wp\/v2\/media\/9872"}],"wp:attachment":[{"href":"https:\/\/www.lrob.fr\/en\/wp-json\/wp\/v2\/media?parent=9871"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.lrob.fr\/en\/wp-json\/wp\/v2\/categories?post=9871"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.lrob.fr\/en\/wp-json\/wp\/v2\/tags?post=9871"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}