In recent days, we have been aware of fraudulent emails (so-called phishing messages) being sent to our users. A phishing email is when attackers attempt to impersonate legitimate companies, with the purpose of these messages is often to obtain login credentials or trick users into authorizing various payments.
In the event of a phishing attack targeting our users, we always report the situation to the appropriate authorities (security firms, hosting and domain providers, domain administrators, government authorities, financial institutions, etc.) in an effort to block the website linked to the phishing message, and to block the message sender. We also perform blocks within our webmail system where applicable.
However, it always takes some time before such an attack can be effectively stopped. The attacker typically changes the content and style of the emails as well as the links used.
If you want to help us defend against these attacks, we kindly ask you to forward any incoming phishing messages to phishing@webnode.com. This address is used for the automatic processing and subsequent analysis of such emails. Please note that you likely won’t receive a reply, as the processing is handled automatically, but this step will be very helpful to us.
In general, we recommend always checking the email sender’s domain, not just the sender's name.
Regarding links, check in the lower-left corner of your browser to see whether they lead to a trusted domain.
Webnode uses domains in the format webnode.xxx (e.g., .com, etc.).
If in doubt, it’s always better to verify the authenticity of the information in the incoming email directly in the Webnode project administration after logging into your account, or you can contact us through our contact form or via Facebook—for example, if the message relates to an expiring domain.
IMPORTANT: If you have already given your login credentials to someone, we strongly recommend changing your login details immediately. If you have already made a payment, please contact your bank immediately, and if a large amount of money is involved, contact the police as well.
Examples of phishing emails (also see the screenshots above):
