Page 1 of 2 12 LastLast
Results 1 to 25 of 35
  1. #1
    Join Date
    Apr 2004
    Location
    UK
    Posts
    1,334

    Exclamation 'Cirtex hosting' - suspicious MSN contact

    Several people (including myself) have been contacted by an @cirtexhosting.com address via MSN - for example in this case; billing@cirtexhosting.com. Sometimes, whoever it is contacts customers, ex-customers and even non-customers demanding cPanel information.

    I am not even a Cirtex customer, and only accepted the add request to see the inevitable and share the logs.

    billing@cirtexhosting.com (E-mail address not verified) says:
    i'am gary

    billing@cirtexhosting.com (E-mail address not verified) says:
    billing support of cirtex

    billing@cirtexhosting.com (E-mail address not verified) says:
    so give me quickly your cpanel login and password

    Jamie says:
    Why?

    billing@cirtexhosting.com (E-mail address not verified) says:
    I tell you that we have a problem of athentification you understand or not?

    billing@cirtexhosting.com (E-mail address not verified) says:
    so quickly sir

    Jamie says:
    You authenticate yourself to me before I hand over and details

    billing@cirtexhosting.com (E-mail address not verified) says:
    Ok I will seek your information manually and your account will be suspended by the company ok?

    billing@cirtexhosting.com (E-mail address not verified) says:
    thanks and have a nice time
    Also mentioned here; http://www.webhostingtalk.com/showth...ex#post4867835
    .
    » Kayako customer service software and live chat software- your customers deserve better than helpdesk

  2. #2
    Join Date
    Feb 2006
    Posts
    1,107
    says NOT VERIFIED - and I'm pretty sure from what I've talked to cirtex, they actually know basic english.

    do not give them any information.
    semi-retired

  3. #3
    Join Date
    Dec 2002
    Location
    chica go go
    Posts
    11,876
    Guy must not be very smart if he's phishing for such a small company

    [09:41] Mikey: hi my cpanel domain is http://e.photos.cx//cpanel and my username is photscx and my password is plzloveme62069 can you plz help me with my account

    [error] 31787#0: *1596721 open() "/home/photodata/www/cpanel" failed (2: No such file or directory), client: 81.192.248.13, server: e.photos.cx, URL: "//cpanel", host: "e.photos.cx"

    so there's his ip.

    aperature:/usr/local/nginx/logs# host 81.192.248.13
    Name: adsl-13-248-192-81.adsl.iam.net.ma
    Address: 81.192.248.13


    lol.

  4. #4
    Are the @cirtexhosting.com addresses verified? (through MSN) If they are, there might be a problem.

  5. #5
    Quote Originally Posted by ub3r View Post
    so there's his ip.
    hehe, good one! Though you might have problems to actually get something done when notifying this Maroccan ISP of the abuse.

  6. #6
    Join Date
    Feb 2006
    Posts
    1,107
    Basically; MSN lets you register anything, even stuff like lolhax@fbi.g0v - you will be able to add the email to your msn list, but you can't change its name from "not verified" until you click the link in the email..
    semi-retired

  7. #7
    Join Date
    Dec 2002
    Location
    chica go go
    Posts
    11,876
    [09:47] billing@cirtexhosting.com (E-mail Address Not Verified): I am Moroccan and I hacked 17 site cirtex
    [09:47] billing@cirtexhosting.com (E-mail Address Not Verified): have a nice day
    [09:47] Mikey: oh good job, i'm sure your keyboarding teacher must be really impressed
    [09:48] billing@cirtexhosting.com (E-mail Address Not Verified): ciao frog women
    [09:48] billing@cirtexhosting.com (E-mail Address Not Verified):


    yeah, i don't get it either.

  8. #8
    Join Date
    Jun 2006
    Location
    United Kingdom
    Posts
    1,776
    Ive been contacted aswell, hes very impatient.

    I just kept giving him fake logins and he soon stopped talking to me
    -- Adam

  9. #9
    Join Date
    Aug 2004
    Location
    Canada
    Posts
    3,785
    ciao frog women!

    HAHA

    Yeah I'm surprised they're going after cirtexhosting when there are others out there much bigger with probably easier people to target (less knowledge).
    Tony B. - Chief Executive Officer
    Hawk Host Inc. Proudly serving websites since 2004
    Quality Shared and Cloud Hosting
    PHP 5.2.x - PHP 8.1.X Support!

  10. #10
    Join Date
    Feb 2006
    Posts
    1,107
    frog woman?
    semi-retired

  11. #11
    Join Date
    Dec 2004
    Location
    United Kingdom
    Posts
    301
    Has anybody actually contacted Cirtex about this yet? They can click an alternative link in the email to disable the account (if they have that address set up).

    I guess I'll send them a friendly poke towards this thread.

  12. #12
    Join Date
    Jan 2003
    Location
    U.S.A.
    Posts
    3,928
    Its pretty sad to see someone doing something like this. I think Cirtex sending out an email to their clients would help.

  13. #13
    Join Date
    Mar 2003
    Location
    New York City
    Posts
    7,406
    Hi Everyone

    We have already noticed this and contacted all customers to not give out their passwords. Thanks for everyones attention in this matter.

    Cheers
    █• Taskade - To-Do List & Tasks All-in-One To-Do List & Mind Map App for Remote Teams
    █• Simple and shareable to-do lists for web, mobile, and desktop
    █• To-Do List Templates 300+ shareable templates and productivity workflows
    █• Get things done, faster and smarter! I eat penguins for breakfast ...

  14. #14
    Join Date
    Nov 2006
    Posts
    45
    Quote Originally Posted by Cirtex View Post
    Hi Everyone

    We have already noticed this and contacted all customers to not give out their passwords. Thanks for everyones attention in this matter.

    Cheers
    Thanks for clarification Cirtex, but can you tell us who if support@cirtexhosting.com is your true MSN or not?

    Its listed in your WHT profile, as MSN contact.

    I have experienced same as the thread starter, but he did not contacted me .. I did contact at that email and also, it was not saying (NOT VERIFIED).

    so..?

  15. #15
    Join Date
    Jun 2001
    Location
    Gotham City
    Posts
    1,852
    "athentification" ... That enough should be alone for anyone to block that guy.
    [[ Reyox Communications / USA based cloud servers & support / 9 years of hosting websites ]]
    [[ Affordable ASP.NET4, ColdFusion, PHP & MS-SQL, MySQL, cPanel/WHM & Windows Reseller Hosting + Virtual Private Servers ]]
    (www.reyox.com) - Mention WHT and get a discount on your first month!

  16. #16
    Join Date
    Jun 2001
    Location
    Gotham City
    Posts
    1,852
    Quote Originally Posted by EngrTun View Post
    Thanks for clarification Cirtex, but can you tell us who if support@cirtexhosting.com is your true MSN or not?

    Its listed in your WHT profile, as MSN contact.

    I have experienced same as the thread starter, but he did not contacted me .. I did contact at that email and also, it was not saying (NOT VERIFIED).

    so..?
    You can always signup for an MSN account and fool people without verifying it.

    Cirtex can easily claim back the address by using the forgotten password feature.
    [[ Reyox Communications / USA based cloud servers & support / 9 years of hosting websites ]]
    [[ Affordable ASP.NET4, ColdFusion, PHP & MS-SQL, MySQL, cPanel/WHM & Windows Reseller Hosting + Virtual Private Servers ]]
    (www.reyox.com) - Mention WHT and get a discount on your first month!

  17. #17
    Join Date
    Jan 2006
    Location
    Athens, Greece
    Posts
    1,481
    i'am gary
    billing support of cirtex
    so give me quickly your cpanel login and password
    or I'll shoot you from the internet and kill you.

    Kids...

  18. #18
    Join Date
    Dec 2002
    Location
    chica go go
    Posts
    11,876
    i'am gary.

  19. #19
    Join Date
    Jul 2002
    Location
    London, United Kingdom
    Posts
    4,455
    Quote Originally Posted by Cirtex View Post
    We have already noticed this and contacted all customers to not give out their passwords
    Sadly there will allways be some fools who fall for this type of scam.
    You can get the MSN account blocked as its using {something}@your domain

  20. #20
    Join Date
    May 2004
    Location
    Pflugerville, TX
    Posts
    11,231
    Quote Originally Posted by ub3r View Post
    i'am gary.
    That should be your new custom title
    Studio1337___̴ı̴̴̡̡̡ ̡͌l̡̡̡ ̡͌l̡*̡̡ ̴̡ı̴̴̡ ̡̡͡|̲̲̲͡͡͡ ̲▫̲͡ ̲̲̲͡͡π̲̲͡͡ ̲̲͡▫̲̲͡͡ ̲|̡̡̡ ̡ ̴̡ı̴̡̡ ̡͌l̡̡̡̡.__Web Design

  21. #21
    Join Date
    May 2007
    Location
    italy
    Posts
    393
    Amusing, indeed.

    Am I the only one wondering how did exactly this kid obtain all those msn contacts of people hosted at cirtex ? o_O' ... Maybe cirtex has a public forum where people post their msn contacts ?
    "I want" never gets ...

  22. #22
    Join Date
    Jul 2004
    Posts
    2,360
    Quote Originally Posted by johnny-l View Post
    Amusing, indeed.

    Am I the only one wondering how did exactly this kid obtain all those msn contacts of people hosted at cirtex ? o_O' ... Maybe cirtex has a public forum where people post their msn contacts ?
    Exactly, how did he get the email of Citrex clients?

  23. #23
    Join Date
    Jan 2004
    Location
    Alberta, Canada
    Posts
    88
    Quote Originally Posted by ub3r View Post
    Guy must not be very smart if he's phishing for such a small company

    [09:41] Mikey: hi my cpanel domain is http://e.photos.cx//cpanel and my username is photscx and my password is plzloveme62069 can you plz help me with my account

    [error] 31787#0: *1596721 open() "/home/photodata/www/cpanel" failed (2: No such file or directory), client: 81.192.248.13, server: e.photos.cx, URL: "//cpanel", host: "e.photos.cx"

    so there's his ip.

    aperature:/usr/local/nginx/logs# host 81.192.248.13
    Name: adsl-13-248-192-81.adsl.iam.net.ma
    Address: 81.192.248.13


    lol.
    HAHAHAHHAHA

  24. #24
    Join Date
    Feb 2005
    Location
    India
    Posts
    922
    This guy had contacted me earlier on AIM :


    Session Start (thinkingsupport:331634707): Wed Dec 26 20:56:18 2007
    [20:56] 331634707: hi

    [20:56] thinkingsupport: Hi
    [20:56] 331634707: how are you today ?
    [20:56] thinkingsupport: I am good.. May I know who is it
    [20:57] 331634707: i'am gary cirtex support
    [20:57] thinkingsupport: Ahh Gary..
    [20:57] thinkingsupport: How can I help you?
    [20:58] 331634707: Are you a customer cirtex

    [20:58] thinkingsupport: Nops ..
    [20:58] thinkingsupport: This is Sam here from ThinkSupport.net
    [20:58] 331634707: you have a reseller or host
    [20:59] thinkingsupport: we are a support company offering hosting support
    [20:59] 331634707: ok give me please your account nformations
    [20:59] thinkingsupport: sorry?
    [21:00] thinkingsupport: What kind of information are you looking for?
    [21:00] 331634707: just to check
    [21:01] thinkingsupport: I am sorry, I still dont get what you are trying to say.. We have no account or any business relation with Cirtexhosting
    [21:01] 331634707: ok have a nice time

    Session Close (331634707): Thu Dec 27 02:41:35 2007

    Weird guy indeed!!!
    Vision Helpdesk : Customer Support Helpdesk Software
    ThinkSupport Solutions™ - ThinkSupport.com

    Thinking of Support Solutions ... Think About US .....!!!
    Skype : vision.helpdesk | Email : sales@visionhelpdesk.com

  25. #25
    I hope all of you are sending in abuse-tickets with his ISP.

Page 1 of 2 12 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •