{"success":true,"data":{"id":"domain-expiration-fraud-phish","label":"Fake domain registrar claiming a domain is expiring and must be renewed via payment link — domain slamming / registrar fraud; real renewal notices come from the actual registrar the domain was registered with.","description":"Fake domain registrar or \"domain expiration service\" claiming a domain name is about to expire and must be renewed via payment link — domain slamming and registrar transfer fraud. Real renewal notices come exclusively from the registrar the domain was registered with; unsolicited \"domain expiration\" emails from unknown senders with urgent payment links are designed to trick domain owners into paying an unfamiliar registrar, thereby transferring domain registration without authorization. Detection: domain name/website domain expiring/lapsing vocabulary + renew now/pay to renew/avoid expiration action + no List-Unsubscribe + no In-Reply-To + not protected sender. Trash score: +3. Source: GC1-R22; ICANN domain slamming advisory; FTC domain registration scam alert.","tier":"danger","category":"phishing","isThin":false}}