Get Paid to Participate - up to $1 per post!     Twitter     Facebook     Google+
Hosting Discussion
 

Hosting Discussion > Web Hosting Forums > Web Hosting Discussion > ApplyHost.com - scam at its best
forgot password?



Reply


Old
  Post #1 (permalink)   02-03-2017, 09:46 PM
HD Management Staff
 
Artashes's Avatar
 
Join Date: Apr 2003
Posts: 9,719

Status: Artashes is online now
For the past three weeks we have been battling a very strange enemy: www.applyhost.com has been attempting to steal from our community.

In the most strange phenomena, ApplyHost.com has attempted to run a mirror image of HostingDiscussion.com on their domain. If you were to visit the URL, what you would see is the exact replica of this community, with all its content. The only difference was the logo, which they change to ApplyHost name (and an ugly as hell on top of that). This was extremely strange to say the least and was something I was witnessing for the first time in my life. ApplyHost doesn't actually have the content. It looks like they simply mirror the site by proxifying requests to our server. Our community security developer has very quickly come up with a custom solution that helped block the attempts. However, they pretended to be a Google bot, trying to spoof certain variables that are sent to the server, so more advanced blocks had to be put in place. Because I got alerted to this website by a member of ours in the first place (you know who you are, so thank you for your vigilance), I am making it known to everyone - I assume the saga is not over yet, so the more eyeballs on this kind of actors out there, the quicker we can handle it.

Because the person behind this URL (applyhost.com) is being so direct trying to damage this community by stealing from us, I have no problem making this event as public as possible (after all, that is what they are asking for). For this purpose, I need the help of the community in exposing every bit of information about the person and/or the company behind them. Preferably to the point of this page getting the highest search engine ranking when someone were to search for the URL and/or name of the owner.

I will start by posting whois information:


Registrant Name: Jian Jiao
Registrant Organization:
Registrant Street: WenJing JiaYuan 26-1-12
Registrant Street: Haigang Qu
Registrant City: Qinhuangdao
Registrant State/Province: Hebei
Registrant Postal Code: 066000
Registrant Country: CN
Registrant Phone: +0.3353588327
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: jiaojian1983@hotmail.com



As a next step, I will of course attempt at shutting the site down by contacting the web hosting provider. Can someone accurately determine this site's host?

Let the fun begin!
 
 
 


Old
  Post #2 (permalink)   02-04-2017, 09:23 AM
HD Guru
 
Join Date: Mar 2013
Posts: 811

Status: Alex HubRocket is offline
That sucks! I've done some digging and it seems they're using Enzu.com (or at least their hosting provider is using them). You should contact them and they can pass it onto the hosting provider if they're not direct.

Also, you could send a DMCA to Google which should remove their listings. You'd then appear as #1 in the results.

However, his domain appears to redirect to Google already so maybe those abuse complaints will now be invalid.

He does have a few other sites that he runs however:
https://who.is/whois/whatcoupons.com
https://who.is/whois/tiaocong.com
https://who.is/whois/eeesearch.com
https://who.is/whois/domaineden.com
https://who.is/whois/clickbbs.com

All associated with the same user.

Last edited by Alex HubRocket : 02-04-2017 at 09:25 AM.
 
 
 


Old
  Post #3 (permalink)   02-04-2017, 10:53 AM
HD Management Staff
 
Artashes's Avatar
 
Join Date: Apr 2003
Posts: 9,719

Status: Artashes is online now
Alex, thank you very much for the information and for the suggestion, we will definitely make it a priority in the coming days to contact Google as well.

I have just discovered that before us, they were actually trying to run the same scam with WHT:
http://web.archive.org/web/201604050...applyhost.com/
 
 
 


Old
  Post #4 (permalink)   02-04-2017, 10:57 AM
HD Management Staff
 
Artashes's Avatar
 
Join Date: Apr 2003
Posts: 9,719

Status: Artashes is online now
I have just dispatched an email to Enzu.com abuse department and will update the community on their response.
 
 
 


Old
  Post #5 (permalink)   02-04-2017, 04:05 PM
HD Wizard
 
easyhostmedia's Avatar
 
Join Date: Mar 2011
Location: Northumberland, UK
Posts: 4,947
Send a message via MSN to easyhostmedia

Status: easyhostmedia is offline
a fraudrecord report made https://www.fraudrecord.com/api/?sho...97c2bca190a625
__________________
Terry Robertson - CEO The Easyhost Media Group
Niceday Hosting - Affordable Hosting
PowerSSL - - We Secure your World
The Scamlist Forum - Fighting against scammers
 
 
 
The Following User Says Thank You to easyhostmedia For This Useful Post:
Artashes (02-04-2017)


Old
  Post #6 (permalink)   02-04-2017, 04:37 PM
HD Management Staff
 
Artashes's Avatar
 
Join Date: Apr 2003
Posts: 9,719

Status: Artashes is online now
Interesting (and thanks!) Do you have to be a client of FraudRecord in order to leave a report?
 
 
 


Old
  Post #7 (permalink)   02-05-2017, 01:54 AM
HD Wizard
 
easyhostmedia's Avatar
 
Join Date: Mar 2011
Location: Northumberland, UK
Posts: 4,947
Send a message via MSN to easyhostmedia

Status: easyhostmedia is offline
Quote:
Originally Posted by Artashes View Post
Interesting (and thanks!) Do you have to be a client of FraudRecord in order to leave a report?
Yes you have to have a fraudrecord account to file a report, but a lot of hosts are these days, so if he gets kicked off his current host and tried to join another host them their is a chance his new host will do a check on him
__________________
Terry Robertson - CEO The Easyhost Media Group
Niceday Hosting - Affordable Hosting
PowerSSL - - We Secure your World
The Scamlist Forum - Fighting against scammers
 
 
 
The Following User Says Thank You to easyhostmedia For This Useful Post:
Artashes (02-05-2017)


Old
  Post #8 (permalink)   02-05-2017, 03:53 AM
HD Guru
 
Join Date: Mar 2013
Posts: 811

Status: Alex HubRocket is offline
In good news, you're #2 on Google for 'ApplyHost'.

The best part, the #1 spot seems to be some totally unrelated site so he doesn't appear to have the top spot .
 
 
 


Old
  Post #9 (permalink)   02-05-2017, 04:03 AM
HD Wizard
 
easyhostmedia's Avatar
 
Join Date: Mar 2011
Location: Northumberland, UK
Posts: 4,947
Send a message via MSN to easyhostmedia

Status: easyhostmedia is offline
well it seems his site is down as its just a white page
__________________
Terry Robertson - CEO The Easyhost Media Group
Niceday Hosting - Affordable Hosting
PowerSSL - - We Secure your World
The Scamlist Forum - Fighting against scammers
 
 
 


Old
  Post #10 (permalink)   02-05-2017, 03:10 PM
HD Management Staff
 
Artashes's Avatar
 
Join Date: Apr 2003
Posts: 9,719

Status: Artashes is online now
Quote:
Originally Posted by Alex HubRocket View Post
In good news, you're #2 on Google for 'ApplyHost'.
That is terrific! And with that, ApplyHost.com URL value is lost forever.

Quote:
Originally Posted by easyhostmedia View Post
well it seems his site is down as its just a white page
That is our doing. We blocked his IP address on the server level.

I haven't heard back from Enzu.com hosting company yet. I am waiting to see the "account suspended" page. At least that is my expectation.
 
 
 


Old
  Post #11 (permalink)   02-05-2017, 03:27 PM
HD Wizard
 
easyhostmedia's Avatar
 
Join Date: Mar 2011
Location: Northumberland, UK
Posts: 4,947
Send a message via MSN to easyhostmedia

Status: easyhostmedia is offline
Quote:
Originally Posted by Artashes View Post

I haven't heard back from Enzu.com hosting company yet.
Good luck with that, i have had spam from their network and they never reply to spam reports.
unless they have corrected the issue then the email they give in their whois record does not exist, so anything sent to that just bounces back.
__________________
Terry Robertson - CEO The Easyhost Media Group
Niceday Hosting - Affordable Hosting
PowerSSL - - We Secure your World
The Scamlist Forum - Fighting against scammers
 
 
 


Old
  Post #12 (permalink)   02-06-2017, 05:25 AM
HD Wizard
 
easyhostmedia's Avatar
 
Join Date: Mar 2011
Location: Northumberland, UK
Posts: 4,947
Send a message via MSN to easyhostmedia

Status: easyhostmedia is offline
the Whois files make for some good reading.

Jian Jiao is associated with ~583 other domains
Whois History 63 records have been archived since 2004-09-29
IP History 35 changes on 21 unique IP addresses over 13 years
Registrar History 6 registrars with 2 drops
Hosting History 21 changes on 13 unique name servers over 12 years

he has been rather busy, which most likely he will just move hosts and IPs again
__________________
Terry Robertson - CEO The Easyhost Media Group
Niceday Hosting - Affordable Hosting
PowerSSL - - We Secure your World
The Scamlist Forum - Fighting against scammers
 
 
 


Old
  Post #13 (permalink)   02-06-2017, 07:32 AM
HD Management Staff
 
Artashes's Avatar
 
Join Date: Apr 2003
Posts: 9,719

Status: Artashes is online now
Quote:
Originally Posted by easyhostmedia View Post
he has been rather busy, which most likely he will just move hosts and IPs again
The stats you found certainly look that way. Switching hosting providers almost every year.
 
 
 


Old
  Post #14 (permalink)   02-06-2017, 08:55 AM
HD Community Advisor
 
SenseiSteve's Avatar
 
Join Date: Mar 2009
Location: Saint Louis
Posts: 4,942
Send a message via MSN to SenseiSteve

Status: SenseiSteve is offline
It takes all kinds, doesn't it?! Good grief!
__________________
ProlimeHost- Dedicated Server Hosting & KVM SSD VPS
Three Datacenter Locations: Los Angeles, Denver & Singapore
SuperMicro Hardware | Multiple Bandwidth Providers | 24/7 On Site Engineers
 
 
 


Old
  Post #15 (permalink)   02-06-2017, 01:54 PM
HD Management Staff
 
Artashes's Avatar
 
Join Date: Apr 2003
Posts: 9,719

Status: Artashes is online now
I have just received a reply to my complaint from his web host's abuse department (Enzu.com).

Quote:
Hello,

Thank you for contacting us regarding this issue. We have forwarded your notification to the end user and are awaiting an update from them.

Generally speaking we don't have the resources to provide any further status updates to you, but please be assured we are working with our customer towards resolving your complaint.


-----------------------
Kind Regards,
Alexander A
BudgetVM Support

We will wait to see what kind of outcome this will result in.
 
 
 
Reply
Previous Thread Next Thread


Thread Tools

New Post New Post   Old Post Old Post
Posting Rules:
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
vB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Sponsored By: