Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


UK1.HOST WHMCS SPAMMER
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

UK1.HOST WHMCS SPAMMER

mramra Member
edited February 2019 in General

SO, I don't know if anyone else has recieved spam messages from uk1host on their whmcs installation but over the last month i certainly have.

Starting about a month ago i started recieving tickets for random things and they were not email based. I would block the email address and then a few hours later have another ticket - eventually i realized this was not email based but the default captcha was being solved so on 2/23/19 i changed it to google's captcha and the problem has gone away.

Over the course of the last month the IP addresses associated with the spam have been from

185.223.163.160
185.115.240.104
37.10.114.200 (resolves to uk1.host)

and have mentioned companies/ websites such as hostmenow.co.uk, letstalkhost.com, myserverplanet.com, and uk1.host

Letstalkhost.com uses ns3 & ns4.uk1.host, interesting.

Looking around online for information on these IP addresses it becomes clear that they are involved in forum spam, and blacklisted.

https://www.abuseipdb.com/check/185.115.240.104
https://cleantalk.org/blacklists/37.10.114.20

https://www.abuseipdb.com/check/37.10.114.200

  • Report of feb 8th directly links youtube video for uk1.host advertisement
  • Same report shows the sending email address of [email protected]

Further search for '[email protected]' reveals further association with uk1.host

It never was evident to me that it was actually the host - uk1.host sending the spams until i recieved a ticket last week directly advertising for their services but, its sad to say that a host would stoop as low as them in spamming whmcs installs to get business. Pretty low. Unfortunately i 'block + deleted' all of the tickets, but the evidence is there online from more reputable places any way.

Thanked by 3eol AlbaHost MasonR

Comments

  • randvegetarandvegeta Member, Host Rep

    Yes. Weve been getting a lot of tickets opened too. Its irritating.

  • AlbaHostAlbaHost Member, Host Rep

    @mra said:
    SO, I don't know if anyone else has recieved spam messages from uk1host on their whmcs installation but over the last month i certainly have.

    Starting about a month ago i started recieving tickets for random things and they were not email based. I would block the email address and then a few hours later have another ticket - eventually i realized this was not email based but the default captcha was being solved so on 2/23/19 i changed it to google's captcha and the problem has gone away.

    Over the course of the last month the IP addresses associated with the spam have been from

    185.223.163.160
    185.115.240.104
    37.10.114.200 (resolves to uk1.host)

    and have mentioned companies/ websites such as hostmenow.co.uk, letstalkhost.com, myserverplanet.com, and uk1.host

    Letstalkhost.com uses ns3 & ns4.uk1.host, interesting.

    Looking around online for information on these IP addresses it becomes clear that they are involved in forum spam, and blacklisted.

    https://www.abuseipdb.com/check/37.10.114.200

    • Report of feb 8th directly links youtube video for uk1.host advertisement

    https://www.abuseipdb.com/check/185.115.240.104
    https://cleantalk.org/blacklists/37.10.114.20

    It never was evident to me that it was actually the host - uk1.host sending the spams until i recieved a ticket last week directly advertising for their services but, its sad to say that a host would stoop as low as them in spamming whmcs installs to get business. Pretty low. Unfortunately i 'block + deleted' all of the tickets, but the evidence is there online from more reputable places any way.

    So the same ip has advertised myserverplanet, does that mean that uk1.host is same person/company as myserverplanet?
    Anyway, if Mods need evidence let me know.

  • FAT32FAT32 Administrator, Deal Compiler Extraordinaire

    @AlbaHost said:
    So the same ip has advertised myserverplanet, does that mean that uk1.host is same person/company as myserverplanet?
    Anyway, if Mods need evidence let me know.

    It is always the more the merrier, but I would prefer sending to a Mod that encounter the same issue too (Not me).

    Thanked by 1AlbaHost
  • Switching from whmcs captcha to recaptcha solved the spam issue....

  • We have got a few similar over the past week also and I would have provided the email, but, it seems we have already deleted it as one does with spam.

  • AlbaHostAlbaHost Member, Host Rep

    @mra said:
    Switching from whmcs captcha to recaptcha solved the spam issue....

    Not to us, they are opening tickets manually more:

    Ticket #475233 has been opened by Derrick.

    Client: Derrick
    Department: Departmenti Teknik
    Subject: Introduction
    Priority: Medium

    I recently sent you an email regarding the below, can you please let me know if you are interested?

    Hello,
    My name is Derrick and I am from MyServerPlanet.com I hope you find the time to read this ticket as I am confident that we can help you accelerate your web hosting business with our range of products and services.

    We are a Registered Limited Company in the United Kingdom.Our product range consists of Dedicated Servers, Managed Servers, Domains and Hosting. We also sell Reseller services which include WHMCS, cPanel/WHM along with SSD Storage and a .com domain all for just £12.50 ($16.40) per month!

    We can also transfer your existing sites.https://www.myserverplanet.com/reseller-hosting.php
    We also have a domain reseller program offering discounts of up to 25% off domains and the ability to sell domains via WHMCS using our free module.

    We are currently offering to double any domain credit top ups to use on this.
    For example, add £15 to your account and we will add another £15 for you to use on our domain reseller program.

    If you're interested in reducing your dedicated server costs; or simply want to expand your customer base with our exclusive reseller programme - then please take the time to reply and we can surely support your business needs!

    Best regards,



    Derrick
    MyServerPlanet.com

    IP Address: 185.115.240.*

  • FAT32FAT32 Administrator, Deal Compiler Extraordinaire

    @UK1Host @MSPNick your turn to explain.

  • How does this work exactly? Are they targeting the provider's ticket system to spam the provider, or are they somehow exploiting whmcs to poach a provider's customers? Either way that sounds like really shitty thing to do.

  • @dahartigan said:
    How does this work exactly? Are they targeting the provider's ticket system to spam the provider, or are they somehow exploiting whmcs to poach a provider's customers? Either way that sounds like really shitty thing to do.

    I think it's the former. And they are starting to spam their offers here too.

  • We have had the exact same spam messages as well

    hostmefast.co.uk
    uk1.host
    myserverplanet.com

  • Yikes, that's concerning.. I've heard of that sort of thing being possible a while ago, but I figured it would have been patched somehow. Would they somehow need the customer's/target's email address? Mind boggling the lengths some people go to :open_mouth:

  • randvegetarandvegeta Member, Host Rep

    @AlbaHost said:

    @mra said:
    Switching from whmcs captcha to recaptcha solved the spam issue....

    Not to us, they are opening tickets manually more:

    Ticket #475233 has been opened by Derrick.

    Client: Derrick
    Department: Departmenti Teknik
    Subject: Introduction
    Priority: Medium

    I recently sent you an email regarding the below, can you please let me know if you are interested?

    Hello,
    My name is Derrick and I am from MyServerPlanet.com I hope you find the time to read this ticket as I am confident that we can help you accelerate your web hosting business with our range of products and services.

    We are a Registered Limited Company in the United Kingdom.Our product range consists of Dedicated Servers, Managed Servers, Domains and Hosting. We also sell Reseller services which include WHMCS, cPanel/WHM along with SSD Storage and a .com domain all for just £12.50 ($16.40) per month!

    We can also transfer your existing sites.https://www.myserverplanet.com/reseller-hosting.php
    We also have a domain reseller program offering discounts of up to 25% off domains and the ability to sell domains via WHMCS using our free module.

    We are currently offering to double any domain credit top ups to use on this.
    For example, add £15 to your account and we will add another £15 for you to use on our domain reseller program.

    If you're interested in reducing your dedicated server costs; or simply want to expand your customer base with our exclusive reseller programme - then please take the time to reply and we can surely support your business needs!

    Best regards,



    Derrick
    MyServerPlanet.com

    IP Address: 185.115.240.*

    Yep.. had the exact same message to a couple of our brands. Several times actually, despite my very polite 'fuck off'.

    Thanked by 1AlbaHost
  • armandorgarmandorg Member, Host Rep

    UK1Host and MyServerPlanet using the same theme but different colors. 1 license, two sites.

    That's the best i could do to connect them with each other. Same Person, Nick.

    |

    Thanked by 1eol
  • RossGRossG Member, Host Rep

    We've been getting lot's of Wordpress comment spam from these companies (or company) recently

  • georgedatacentergeorgedatacenter Member, Patron Provider

    Letstalkhost.com then the owners are uk1?

  • Well you can see the mods on letstalkhost are nick and mason, uk1host is register to a mason crollie. Nameservers for it at ns3 / ns4.uk1.host.... so yes, it is.

  • i have worst experience with myserverplanet i think they are newbies

  • MaherMaher Member
    edited February 2019

    Mass-advertising at its finest.

  • Targeting a particular software is pretty normal. Seems a bit odd that a hosting provider would target other hosting providers.

  • Worth noting that the owner of UK1 Host is the same guy that owned hostingspecialists.co.uk, which subsequently deadpooled.

  • PhotonVPSPhotonVPS Member, Host Rep

    Been getting these too...

  • MasonRMasonR Community Contributor

    @UK1Host Last Active 3:54PM

    Justify your crimes, you muppet.

  • uptimeuptime Member
    edited February 2019

    "No muppet. No muppet. You're the muppet!"

  • The muppet is nigh.

  • The end is woooohoooo

    Thanked by 3uptime eol dahartigan
  • If you continue to behave in this way I'll be forced to engage you, once I begin the sequence of combat it'll only end in your demise.

    Thanked by 2uptime dahartigan
  • @austenite said:
    If you continue to behave in this way I'll be forced to engage you, once I begin the sequence of combat it'll only end in your demise.

    When you finish, his rear vashin will hang like sleeve of wizard.

Sign In or Register to comment.