Clicky
Last visit was: Sat Jul 05, 2014 12:30 pm
It is currently Sat Jul 05, 2014 12:30 pm

How to Report an active phishing site - [sketch]


All times are UTC - 5 hours [ DST ]


 [ 19 posts ]  Go to page Previous  1, 2
Author Message
 PostPosted: Fri Dec 11, 2009 10:34 am   
Spammer Killing Machine
User avatar

Joined: Thu Apr 03, 2008 4:33 pm
Posts: 590
Location: Florida
Here's my "phishing" contacts.

<[email protected]>, <[email protected]>, <[email protected]>, "antiphishing dot org" <[email protected]>

Phishtank is largely "report only" - as in they don't persue any of it, but they do make the data available to companies who are victims (PayPal, ebay, the banks, etc...). AFAIK, you have to be a member for that address to accept your submissions.

I'm thinking US-CERT must participate in take-downs ;) Since a lot of these tend to use hijacked hosting or hacked webservers.....

coldrainnet/knujon - afaik uses their data for "brand protection" - and also distributes the phish submissions to the responsible parties (the trademark owners; i.e. the banks/paypal/ebay)

_________________
SpamPoison


Top
 Profile  
 PostPosted: Tue Jun 01, 2010 1:00 pm   
Spam Muncher
User avatar

Joined: Wed Jan 03, 2007 10:19 am
Posts: 890
Location: North Britain
While much of the phishing spam I've had recently has used URL redirection from the actual spammed address as basic obfuscation (and been shut down in six hours or so) some of the ones I've had recently have been in the format of - httq://83-103-85-109.ip.fastwebnet.it/u ... sbc.co.uk/ . Is the base address (fastwebnet.it) redirecting to an IP address (83.103.85.109) or is it something more complicated. Whatever it is it seems more of a challenge to report as in this format they seem able to stay up for most of a week.

_________________
Ruffian antics are a wrench in society's gears


Top
 Profile  
 PostPosted: Thu Jun 03, 2010 1:46 pm   
Spammer Killing Machine
User avatar

Joined: Thu Apr 03, 2008 4:33 pm
Posts: 590
Location: Florida
I've gotten decent responses using the SpamCop contacts available for phish domains.

But sadly, there are some hosters that will not accept SC reports _at all_......then it's back to the basics of sending them the message through the good old mail client :)

_________________
SpamPoison


Top
 Profile  
 PostPosted: Fri Jun 04, 2010 11:19 am   
Spammers' Nightmare
User avatar

Joined: Thu Apr 05, 2007 4:10 pm
Posts: 2777
ahoier wrote:
Quote:
But sadly, there are some hosters that will not accept SC reports _at all_
This is unfortunate, I don't use Spamcop enough to know that certain hosters reject reports. That is rather telling to me. :evil:


Top
 Profile  
 [ 19 posts ]  Go to page Previous  1, 2

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: Wayback machine and 0 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Jump to:  


Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
Style originally created by Volize © 2003 • Redesigned SkyLine by MartectX © 2008