• I have been getting emails like this

    “Howdy! Your site at http://192.185.87.173/~videouniversity has been
    updated automatically to WordPress 4.1.3.”
    etc.

    It invites me to login in my WordPress admin page. I believe someone is trying to steal my password.

    I am not connected with that IP address, but I do own Videouniversity.com

    The email is sent from echo.websitewelcome.com
    That is a surrogate of hostgator.com, but complaining to them has been a waste of time.

    I get the same email every couple weeks. Looking closer, it appears that they have stolen my entire site. Is there anything I can do about this?

    Thanks

Viewing 2 replies - 1 through 2 (of 2 total)
  • Moderator t-p

    (@t-p)

    I get the same email every couple weeks.

    Since you upgraded to 4.2.2, are still getting such emails every couple of weeks?

    4.2.2. is latest release. After this there has been no release.

    Since you upgraded to 4.2.2, are these emails that you get every couple of weeks telling you your site has been updated to 4.2.2. or something else?

    I spend lots of time volunteering on these forums, but have not heard something like this.

    The email is sent from echo.websitewelcome.com
    That is a surrogate of hostgator.com, but complaining to them has been a waste of time.

    If email is coming from the surrogate of your hosting provider, then they should look into it.

    Thread Starter jks0qqgg

    (@jks0qqgg)

    That was one of the early emails. It’s clearly a phishing attempt since they ask me to log in to my wordpress dashboard. Hostgator is not my host, but they are hosting that illegal address
    http://192.185.87.173/~videouniversity

    Most of my web site has been illegally copied onto that address. This is copyright and trademark infringement.

    There’s a site run partially by the FBI to investigate such things. I’ve applied there and may have to file a DMCA notice which costs $200.

    Any suggestions?

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘Phising Attack appears to be from WordPress’ is closed to new replies.