spamislame wrote:A quick note to see if I'm the only one noticing this.
Since 2014, about twice a month I receive phishing spam which always links to a website hosted on IP addresses operated by the HostGator subsidiary "Websitewelcome.com"
Today's example, another fake "Mystery Shopper" phishing site. Spammed using an initial redirect:
That's on IP address 126.96.36.199.
That page does a meta-refresh redirect to:
Which posts its form to:
That domain is hosted on this IP:
This is the first websitewelcome phishing takeover for May 2016 that I've seen. For April there were 7. For each month prior to that there have been around 4 or 5.
Websitewelcome's website has zero information and lists an abuse email address that from my own experience does absolutely nothing with the messages it receives (firstname.lastname@example.org)
I've spent the past three years attempting to get Hostgator's abuse team on board with taking *any* action whatsoever regarding these repeated hacks into their servers, but have seen absolutely no action on their part.
At this point my assumption is they just flat-out don't care, and will never take any action. What does it take to get a hosting company in front of an org. like the FTC for this kind of lax attitude towards the theft of personal data?
Fake Yahoo Mail phishing site:
Hosted on WebsiteWelcome IP: 188.8.131.52
I'm pretty sure their entire IP space is owned by phishing criminals. Predominantly from Ukraine, selling their hacked server access to Nigerians who operate the phishing sites.
Users browsing this forum: No registered users and 0 guests