How to Report an active phishing site - [sketch]

Phishing operations, including perpetrators, how to report them and get them shut down.

Re: How to Report an active phishing site - [sketch]

Postby ahoier » Fri Dec 11, 2009 10:34 am

Here's my "phishing" contacts.

<phish@phishtank.com>, <phishing-report@us-cert.gov>, <phishing@coldrain.net>, "antiphishing dot org" <reportphishing@antiphishing.org>

Phishtank is largely "report only" - as in they don't persue any of it, but they do make the data available to companies who are victims (PayPal, ebay, the banks, etc...). AFAIK, you have to be a member for that address to accept your submissions.

I'm thinking US-CERT must participate in take-downs ;) Since a lot of these tend to use hijacked hosting or hacked webservers.....

coldrainnet/knujon - afaik uses their data for "brand protection" - and also distributes the phish submissions to the responsible parties (the trademark owners; i.e. the banks/paypal/ebay)
ahoier
Spammer Killing Machine
 
Posts: 593
Joined: Thu Apr 03, 2008 4:33 pm
Location: Florida

Re: How to Report an active phishing site - [sketch]

Postby Benzyl » Tue Jun 01, 2010 1:00 pm

While much of the phishing spam I've had recently has used URL redirection from the actual spammed address as basic obfuscation (and been shut down in six hours or so) some of the ones I've had recently have been in the format of - httq://83-103-85-109.ip.fastwebnet.it/u ... sbc.co.uk/ . Is the base address (fastwebnet.it) redirecting to an IP address (83.103.85.109) or is it something more complicated. Whatever it is it seems more of a challenge to report as in this format they seem able to stay up for most of a week.
Ruffian antics are a wrench in society's gears
User avatar
Benzyl
Spam Muncher
 
Posts: 889
Joined: Wed Jan 03, 2007 10:19 am
Location: North Britain

Re: How to Report an active phishing site - [sketch]

Postby ahoier » Thu Jun 03, 2010 1:46 pm

I've gotten decent responses using the SpamCop contacts available for phish domains.

But sadly, there are some hosters that will not accept SC reports _at all_......then it's back to the basics of sending them the message through the good old mail client :)
ahoier
Spammer Killing Machine
 
Posts: 593
Joined: Thu Apr 03, 2008 4:33 pm
Location: Florida

Re: How to Report an active phishing site - [sketch]

Postby meep » Fri Jun 04, 2010 11:19 am

ahoier wrote:
But sadly, there are some hosters that will not accept SC reports _at all_
This is unfortunate, I don't use Spamcop enough to know that certain hosters reject reports. That is rather telling to me. :evil:
User avatar
meep
Spammers' Nightmare
 
Posts: 2777
Joined: Thu Apr 05, 2007 4:10 pm

Previous

Return to Phishers

Who is online

Users browsing this forum: No registered users and 4 guests