In France we have a government service called Signal Spam that you can forward phishing to. I do not know if they do anything. I have forwarded forty Hetzner clones this year.
The best protection is still my bank's app refusing to let me authorize payments from desktop browsers. They force mobile confirmation for everything.
Member
Tanie serwery to moja pasja ale tanie to nie znaczy bezpieczne.
I use Contabo from Wrocław. Their email is so ugly that any clone looks better than the real thing. This is actually a security problem. Real Contabo mail looks like phishing, so users ignore the warnings.
I pay 4 EUR for VPS in Nuremberg. For this price I do not complain about email formatting.
This. So much this. I got a real Vultr abuse notice last month and almost deleted it because the formatting was worse than the fake Carlos got. Plain text, broken wrapping, no logo.
If these companies spent half as much on email design as phishers do, we would all be safer.
Member
Oh no~~~ very much true~~~
I get real email from my host in Vietnam, look very bad, same same scam email~~~ I do not know which is real~~~
Now I login only from bookmark, never from email link~~~ very safe~~~
But I want to know: Hetzner have datacenter in Vietnam? No? Only Germany and Finland and some place, no?
Member OP
No. Falkenstein, Nuremberg, Helsinki, Ashburn, Hillsboro, Singapore. Singapore is the closest to you but latency will still be 30-40ms.
I run my stuff in Hillsboro for the privacy laws, not for ping.
São Paulo here. Vultr has a datacenter here, which is why I use them. Hetzner does not. Contabo does not. Local latency matters when you are managing servers by SSH.
I have never gotten a phishing email pretending to be Vultr Brazil. Maybe the scammers do not know we exist.
Vultr São Paulo is real but their routing to domestic ISPs is terrible. I get better latency to Miami sometimes. The datacenter exists on paper but the peering is lacking.
I use Vultr for the block storage API, not for compute in South America.
Nobody good for compute. Njalla as you said. There is a reseller market where people rent servers and sublet for crypto, but you are trusting an individual with root on your box.
For inference workloads I run at home on consumer GPUs. No KYC, no phishing email, no datacenter. The power bill is the only tracking.
Following this thread. I got the same Hetzner clone last week, did not notice the domain mismatch because I was on mobile and the URL bar was hidden by the fullscreen phishing UI.
Mobile browsers are the real attack surface now. Chrome hides everything until you scroll. Safari too.
This is why I use Firefox on Android with the URL bar fixed at top. No hiding. Also uBlock Origin works properly, which it does not on Safari.
The phishing sites also detect mobile and serve a different, simpler page that looks more "app-like" to bypass user suspicion.
