The "Freeola Customer Forum" forum, which includes Retro Game Reviews, has been archived and is now read-only. You cannot post here or create a new thread or review on this forum.
Just received a spam email with the 'from' address the same as the 'to' address which belongs to me!
Looking into the headers I noticed:
"X-PHP-Originating-Script: 1000:form_to_mail.php"
So it looks like they are managing to use my Freeola website formmail script bypassing the Freeola captcha and changing the subject to their own spammy one:
Do you need minimum 4000 visitors coming from newspapers and Facebook?
The originating dodgy IP address (Romania) was 86.127.205.96
FWIW I've blocked that address - see guide.
A Google shows they have been very active today!
Hopefully they'll be jumped on and this isn't the start of something.
Email contents:
Name: Adelle Hastings
Email: [email protected]
Message: Hi,
do you want minimum 4000 real human visitors coming from online newspapers, Facebook, Twitter, Google, Yahoo and Bing ?
*link removed*
Best regards,
Adelle Hastings
Looking into the headers I noticed:
"X-PHP-Originating-Script: 1000:form_to_mail.php"
So it looks like they are managing to use my Freeola website formmail script bypassing the Freeola captcha and changing the subject to their own spammy one:
Do you need minimum 4000 visitors coming from newspapers and Facebook?
The originating dodgy IP address (Romania) was 86.127.205.96
FWIW I've blocked that address - see guide.
A Google shows they have been very active today!
Hopefully they'll be jumped on and this isn't the start of something.
Email contents:
Name: Adelle Hastings
Email: [email protected]
Message: Hi,
do you want minimum 4000 real human visitors coming from online newspapers, Facebook, Twitter, Google, Yahoo and Bing ?
*link removed*
Best regards,
Adelle Hastings
[s]Hmmm...[/s]
Cheeky spammers!
Received this hacked FORM from a different Romanian IP.
Amended subject from Freeola Formmail:
"fix for contact form"
Name: Athene Williams
Email: [email protected]
Message: Hi,
i think you are not happy with how your contact form performs. i can help you put some anti-spam measures on it, would take around 2-3 hours of work
*removed dodgy bitly link*
Best regards,
Athene Williams
IT & Web SUpport Assistant
@Freeola
You are aware of this via Twitter. Please let me know if you need a Support Ticket for this.
EDIT: The stats for the bitly link show it's been followed 495 times!
Hopefully these aren't all Freeola customers...
Post edited by Hmmm... on 28/09/2017 at 11:53.
Received this hacked FORM from a different Romanian IP.
Amended subject from Freeola Formmail:
"fix for contact form"
Name: Athene Williams
Email: [email protected]
Message: Hi,
i think you are not happy with how your contact form performs. i can help you put some anti-spam measures on it, would take around 2-3 hours of work
*removed dodgy bitly link*
Best regards,
Athene Williams
IT & Web SUpport Assistant
@Freeola
You are aware of this via Twitter. Please let me know if you need a Support Ticket for this.
EDIT: The stats for the bitly link show it's been followed 495 times!
Hopefully these aren't all Freeola customers...
[s]Hmmm...[/s]Post edited by Hmmm... on 28/09/2017 at 11:53.
Just received a spam email with the 'from' address the same as the 'to' address which belongs to me!
Looking into the headers I noticed:
"X-PHP-Originating-Script: 1000:form_to_mail.php"
So it looks like they are managing to use my Freeola website formmail script bypassing the Freeola captcha and changing the subject to their own spammy one:
Do you need minimum 4000 visitors coming from newspapers and Facebook?
The originating dodgy IP address (Romania) was 86.127.205.96
FWIW I've blocked that address - see guide.
A Google shows they have been very active today!
Hopefully they'll be jumped on and this isn't the start of something.
Email contents:
Name: Adelle Hastings
Email: [email protected]
Message: Hi,
do you want minimum 4000 real human visitors coming from online newspapers, Facebook, Twitter, Google, Yahoo and Bing ?
*link removed*
Best regards,
Adelle Hastings
Looking into the headers I noticed:
"X-PHP-Originating-Script: 1000:form_to_mail.php"
So it looks like they are managing to use my Freeola website formmail script bypassing the Freeola captcha and changing the subject to their own spammy one:
Do you need minimum 4000 visitors coming from newspapers and Facebook?
The originating dodgy IP address (Romania) was 86.127.205.96
FWIW I've blocked that address - see guide.
A Google shows they have been very active today!
Hopefully they'll be jumped on and this isn't the start of something.
Email contents:
Name: Adelle Hastings
Email: [email protected]
Message: Hi,
do you want minimum 4000 real human visitors coming from online newspapers, Facebook, Twitter, Google, Yahoo and Bing ?
*link removed*
Best regards,
Adelle Hastings
[s]Hmmm...[/s]