{"id":2850,"date":"2026-05-28T15:12:02","date_gmt":"2026-05-28T15:12:02","guid":{"rendered":"https:\/\/uptimerobot.com\/blog\/?p=2850"},"modified":"2026-05-28T15:12:02","modified_gmt":"2026-05-28T15:12:02","slug":"brand-impersonation-emails","status":"publish","type":"post","link":"https:\/\/uptimerobot.com\/blog\/brand-impersonation-emails\/","title":{"rendered":"Brand impersonation emails: what’s happening and what we’re doing about it."},"content":{"rendered":"

We’ve become aware that a third party is sending emails that impersonate UptimeRobot, copying our branding and email template design from domains that have no connection to us. We want to be upfront with our community about what we know and the steps we’re taking.<\/span><\/p>\n

What’s happening<\/span><\/h2>\n

Since mid-May 2026, we’ve observed unusual activity involving emails that appear to come from UptimeRobot but are sent from third-party domains such as \u201c<\/span>support@hal*****updates.com\u201d<\/span>. These emails copy our visual branding and mimic our account activation template, but they were never sent through our systems.<\/span><\/p>\n

At the time of writing, the messages contain no malicious links. We’re continuing to monitor the situation closely.<\/span><\/p>\n

This is brand impersonation. The attacker copied the appearance of our emails and sent them from their own servers. We’ve confirmed that none of these messages originated from our email infrastructure, and the recipients are not UptimeRobot account holders. No access to our platform was required to carry this out.<\/span><\/p>\n

What we’re doing about it<\/span><\/h2>\n
    \n
  • Reporting the fraudulent domains<\/span> to DNS block lists and spam registries to limit further distribution.<\/span><\/li>\n
  • Monitoring our inboxes and social channels<\/span> for reports of suspicious emails so we can respond quickly.<\/span><\/li>\n
  • Investigating the scope<\/span> of the campaign to understand how widely the emails were distributed.<\/span><\/li>\n<\/ul>\n

    What to do if you received one<\/span><\/h2>\n

    If you received an email that looks like it’s from UptimeRobot but you didn’t sign up for anything:<\/span><\/p>\n

      \n
    • Don’t reply, click any links, or download attachments. Just delete it.<\/span><\/li>\n
    • Check the sender address. Real UptimeRobot emails come from <\/span>uptimerobot.com, itrinity.com,<\/span> and its subdomains (such as <\/span>@mail.uptimerobot.com<\/span> or <\/span>@user.uptimerobot.com<\/span>). If the sender domain is anything else, treat it as fake.<\/span><\/li>\n
    • If you’re unsure whether an email is really from us, or you’re an existing user with concerns about your account, contact us at <\/span>support@uptimerobot.com<\/span>.<\/span><\/li>\n<\/ul>\n

      Looking ahead<\/span><\/h2>\n

      We take any misuse of our brand seriously. We’ll update this post if the situation changes or if we have new information to share.<\/span><\/p>\n

      Thanks for your trust.<\/span><\/p>\n

      The UptimeRobot Team<\/span><\/p>\n

       <\/p>\n","protected":false},"excerpt":{"rendered":"

      We’ve become aware that a third party is sending emails that impersonate UptimeRobot, copying our branding and email template design from domains that have no connection to us. We want to be upfront with our community about what we know and the steps we’re taking. What’s happening Since mid-May 2026, we’ve observed unusual activity involving […]<\/p>\n","protected":false},"author":17,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"_is_featured_guide":false,"_post_views":0,"_reading_completions":3,"footnotes":""},"categories":[2],"tags":[],"class_list":["post-2850","post","type-post","status-publish","format-standard","hentry","category-announcements"],"acf":[],"yoast_head":"\nBrand impersonation emails: what's happening and what we're doing about it. | UptimeRobot Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/uptimerobot.com\/blog\/brand-impersonation-emails\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Brand impersonation emails: what's happening and what we're doing about it. | UptimeRobot Blog\" \/>\n<meta property=\"og:description\" content=\"We’ve become aware that a third party is sending emails that impersonate UptimeRobot, copying our branding and email template design from domains that have no connection to us. We want to be upfront with our community about what we know and the steps we’re taking. What’s happening Since mid-May 2026, we’ve observed unusual activity involving […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/uptimerobot.com\/blog\/brand-impersonation-emails\/\" \/>\n<meta property=\"og:site_name\" content=\"UptimeRobot Blog\" \/>\n<meta property=\"article:published_time\" content=\"2026-05-28T15:12:02+00:00\" \/>\n<meta name=\"author\" content=\"Christian Stoyanov\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Christian Stoyanov\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/uptimerobot.com\/blog\/brand-impersonation-emails\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/uptimerobot.com\/blog\/brand-impersonation-emails\/\"},\"author\":{\"name\":\"Christian Stoyanov\",\"@id\":\"https:\/\/uptimerobot.com\/blog\/#\/schema\/person\/a6bd2c2457ee0f6866e4f72e5bbbde10\"},\"headline\":\"Brand impersonation emails: what’s happening and what we’re doing about it.\",\"datePublished\":\"2026-05-28T15:12:02+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/uptimerobot.com\/blog\/brand-impersonation-emails\/\"},\"wordCount\":369,\"articleSection\":[\"Announcements\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/uptimerobot.com\/blog\/brand-impersonation-emails\/\",\"url\":\"https:\/\/uptimerobot.com\/blog\/brand-impersonation-emails\/\",\"name\":\"Brand impersonation emails: what's happening and what we're doing about it. | UptimeRobot Blog\",\"isPartOf\":{\"@id\":\"https:\/\/uptimerobot.com\/blog\/#website\"},\"datePublished\":\"2026-05-28T15:12:02+00:00\",\"author\":{\"@id\":\"https:\/\/uptimerobot.com\/blog\/#\/schema\/person\/a6bd2c2457ee0f6866e4f72e5bbbde10\"},\"breadcrumb\":{\"@id\":\"https:\/\/uptimerobot.com\/blog\/brand-impersonation-emails\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/uptimerobot.com\/blog\/brand-impersonation-emails\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/uptimerobot.com\/blog\/brand-impersonation-emails\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/uptimerobot.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Announcements\",\"item\":\"https:\/\/uptimerobot.com\/blog\/category\/announcements\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Brand impersonation emails: what’s happening and what we’re doing about it.\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/uptimerobot.com\/blog\/#website\",\"url\":\"https:\/\/uptimerobot.com\/blog\/\",\"name\":\"UptimeRobot Blog\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/uptimerobot.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/uptimerobot.com\/blog\/#\/schema\/person\/a6bd2c2457ee0f6866e4f72e5bbbde10\",\"name\":\"Christian Stoyanov\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/uptimerobot.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/69a0c4827159efa80110fcae64d43a5db06fcd03b39ae069b4008eb1e93d21e2?s=96&d=retro&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/69a0c4827159efa80110fcae64d43a5db06fcd03b39ae069b4008eb1e93d21e2?s=96&d=retro&r=g\",\"caption\":\"Christian Stoyanov\"},\"url\":\"https:\/\/uptimerobot.com\/blog\/author\/christian\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Brand impersonation emails: what's happening and what we're doing about it. | UptimeRobot Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/uptimerobot.com\/blog\/brand-impersonation-emails\/","og_locale":"en_US","og_type":"article","og_title":"Brand impersonation emails: what's happening and what we're doing about it. | UptimeRobot Blog","og_description":"We’ve become aware that a third party is sending emails that impersonate UptimeRobot, copying our branding and email template design from domains that have no connection to us. We want to be upfront with our community about what we know and the steps we’re taking. What’s happening Since mid-May 2026, we’ve observed unusual activity involving […]","og_url":"https:\/\/uptimerobot.com\/blog\/brand-impersonation-emails\/","og_site_name":"UptimeRobot Blog","article_published_time":"2026-05-28T15:12:02+00:00","author":"Christian Stoyanov","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Christian Stoyanov","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/uptimerobot.com\/blog\/brand-impersonation-emails\/#article","isPartOf":{"@id":"https:\/\/uptimerobot.com\/blog\/brand-impersonation-emails\/"},"author":{"name":"Christian Stoyanov","@id":"https:\/\/uptimerobot.com\/blog\/#\/schema\/person\/a6bd2c2457ee0f6866e4f72e5bbbde10"},"headline":"Brand impersonation emails: what’s happening and what we’re doing about it.","datePublished":"2026-05-28T15:12:02+00:00","mainEntityOfPage":{"@id":"https:\/\/uptimerobot.com\/blog\/brand-impersonation-emails\/"},"wordCount":369,"articleSection":["Announcements"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/uptimerobot.com\/blog\/brand-impersonation-emails\/","url":"https:\/\/uptimerobot.com\/blog\/brand-impersonation-emails\/","name":"Brand impersonation emails: what's happening and what we're doing about it. | UptimeRobot Blog","isPartOf":{"@id":"https:\/\/uptimerobot.com\/blog\/#website"},"datePublished":"2026-05-28T15:12:02+00:00","author":{"@id":"https:\/\/uptimerobot.com\/blog\/#\/schema\/person\/a6bd2c2457ee0f6866e4f72e5bbbde10"},"breadcrumb":{"@id":"https:\/\/uptimerobot.com\/blog\/brand-impersonation-emails\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/uptimerobot.com\/blog\/brand-impersonation-emails\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/uptimerobot.com\/blog\/brand-impersonation-emails\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/uptimerobot.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Announcements","item":"https:\/\/uptimerobot.com\/blog\/category\/announcements\/"},{"@type":"ListItem","position":3,"name":"Brand impersonation emails: what’s happening and what we’re doing about it."}]},{"@type":"WebSite","@id":"https:\/\/uptimerobot.com\/blog\/#website","url":"https:\/\/uptimerobot.com\/blog\/","name":"UptimeRobot Blog","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/uptimerobot.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/uptimerobot.com\/blog\/#\/schema\/person\/a6bd2c2457ee0f6866e4f72e5bbbde10","name":"Christian Stoyanov","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/uptimerobot.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/69a0c4827159efa80110fcae64d43a5db06fcd03b39ae069b4008eb1e93d21e2?s=96&d=retro&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/69a0c4827159efa80110fcae64d43a5db06fcd03b39ae069b4008eb1e93d21e2?s=96&d=retro&r=g","caption":"Christian Stoyanov"},"url":"https:\/\/uptimerobot.com\/blog\/author\/christian\/"}]}},"_links":{"self":[{"href":"https:\/\/uptimerobot.com\/blog\/wp-json\/wp\/v2\/posts\/2850","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/uptimerobot.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/uptimerobot.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/uptimerobot.com\/blog\/wp-json\/wp\/v2\/users\/17"}],"replies":[{"embeddable":true,"href":"https:\/\/uptimerobot.com\/blog\/wp-json\/wp\/v2\/comments?post=2850"}],"version-history":[{"count":0,"href":"https:\/\/uptimerobot.com\/blog\/wp-json\/wp\/v2\/posts\/2850\/revisions"}],"wp:attachment":[{"href":"https:\/\/uptimerobot.com\/blog\/wp-json\/wp\/v2\/media?parent=2850"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/uptimerobot.com\/blog\/wp-json\/wp\/v2\/categories?post=2850"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/uptimerobot.com\/blog\/wp-json\/wp\/v2\/tags?post=2850"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}