Website Hosting

WEBSITE HOSTING

Adding this as a topic was prompted by these February 2023 stories about GoDaddy detailing the many break-ins to their system.

In addition to hosting websites, GoDaddy is also a registrar, that is, they register domain names. There are hundreds of domain registrars and considering the track record of GoDaddy, as detailed in the articles below, using a different registrar is the Defensive Computing thing to do. I like pairdomains.com.

GODADDY

GoDaddy: Hackers stole source code, installed malware in multi-year breach by Sergiu Gatlan for Bleeping Computer. February 17, 2023. GoDaddy provides website hosting services to more than 20 million customers. They were previously breached in November 2021 and March 2020. The November 2021 incident led to a data breach affecting 1.2 million Managed WordPress customers. In that case, attackers breached GoDaddy's WordPress hosting environment using a compromised password. In the March 2020 breach 28,000 customers had bad guys use their web hosting account credentials to connect to their hosting account.

From Andy Greenberg in Wired (Feb 18, 2023): "Discovering that hackers have had stealthy access to your corporate network for three years is bad enough. Web hosting company GoDaddy this week confessed to something even worse: A group of hackers it had repeatedly spotted inside its network had returned - or never left - and have been wreaking havoc in its network since at least March 2020, despite all the company's attempts to expel them."

From GoDaddy: Statement on recent website redirect issues February 16, 2023.

The GoDaddy 10-K filing with the UNITED STATES SECURITIES AND EXCHANGE COMMISSION for the fiscal year ended December 31, 2022

Back in December 2021, Zach Edwards warned GoDaddy about problems. Compromised Godaddy Infrastructure Attacking Numerous U.S. Government Websites to Promote 'Canadian Pharmacy' Scam Websites. Quoting: "... something is very, very wrong with GoDaddy infrastructure. Today. Right now. I’ve attempted to report these problems to several entities/orgs for a good chunk of 2021, nothing has been fixed, and the problems seem to be growing."