News for hackers. Stuff that matters.

A comment on Ask HN: Namecheap is refusing to halt a novel phishing scam. Please Help.

Re:Ask HN: Namecheap is refusing to halt a novel phishing sc... by throwawaykwt01 on Wednesday March 09, 2022 @11:58AM (#30616831)
Here is the url lightly obfuscated if anyone is interested in investigating further: https:// kuwaitpostparcel [DOT] express / KW343

You can trigger the website by using "responsive mode" in dev tools and selecting a common android device.

Please note that this site /is/ malicious. Investigate at your own risk.

[ Parent | on HN ]
Re:Ask HN: Namecheap is refusing to halt a novel phishing sc... by LinuxBender on Wednesday March 09, 2022 @12:32PM (#30617438)
They have some management daemons listening. [1] That could be how they were compromised. Did you try emailing all the addresses listed on this page? [2]

[1] - https://www.shodan.io/host/162.0.229.161

[2] - https://bgp.he.net/ip/162.0.229.161#_whois

[ Parent | on HN ]