On April 16, ENS chief developer nick.eth issued a document stating that it had encountered an extremely complex phishing attack that exploited a vulnerability in Google's infrastructure, but Google refused to fix the vulnerability. He stated that the attack email looked very real, could be verified by DKIM signatures, was displayed normally by GMail, and was placed in the same conversation with other legitimate security warnings. The attacker used Google's "site" service to create a trusted "support portal" page. Because users would see that the domain name contained "google.com" and mistakenly thought it was safe, users should be cautious.