spamislame wrote:A quick note to see if I'm the only one noticing this.
Since 2014, about twice a month I receive phishing spam which always links to a website hosted on IP addresses operated by the HostGator subsidiary "Websitewelcome.com"
Today's example, another fake "Mystery Shopper" phishing site. Spammed using an initial redirect:
That's on IP address 18.104.22.168.
That page does a meta-refresh redirect to:
Which posts its form to:
That domain is hosted on this IP:
This is the first websitewelcome phishing takeover for May 2016 that I've seen. For April there were 7. For each month prior to that there have been around 4 or 5.
Websitewelcome's website has zero information and lists an abuse email address that from my own experience does absolutely nothing with the messages it receives (email@example.com)
I've spent the past three years attempting to get Hostgator's abuse team on board with taking *any* action whatsoever regarding these repeated hacks into their servers, but have seen absolutely no action on their part.
At this point my assumption is they just flat-out don't care, and will never take any action. What does it take to get a hosting company in front of an org. like the FTC for this kind of lax attitude towards the theft of personal data?
Fake Yahoo Mail phishing site:
Hosted on WebsiteWelcome IP: 22.214.171.124
I'm pretty sure their entire IP space is owned by phishing criminals. Predominantly from Ukraine, selling their hacked server access to Nigerians who operate the phishing sites.
Users browsing this forum: No registered users and 1 guest