Reporting a phishing email address

jabberwock

Hiya all,

I' looking for some info/insight into reporting email addresses to the big providers. Gmail, Yahoo, Hotmail, etc.

*background*

The website I'm working for gets targeted by phishers everyday. I've put in place a goodish system of getting rid of the actual phishing sites but would like to do more.

What I want to do is start retaliating at a low level by going after their email address that they use in their phishing sites.

I have tried using most of the standard contact methods to no response. so am looking for an alternative.

Has anybody on here got some first hand experience by chance!?!

Anything would be a help!

TIA

Also what sort of level of activity is going on in Ireland with regards to phishing and such like!

bertisevil

Not sure of the level of phishing activity in Ireland, but I doubt reporting these email addresses would do any good, these are free email accounts, Takes about 60 seconds to set one up. Also I'm sure these people also have access to hacked email accounts which they could also use. One simple thing you could do if some digital squatter hasn't done so already is to buy up the domains due to simple misspellings, stopping people from visiting the wrong site through simple misspelling i.e.

www.google.ie

buy

www.googl.ie

All of these major operators do have abuse report procedures, check those sites for the exact address, normally something akin to abuse@yahoo.com etc.. (but I wouldn't hold my breath for a response.)

The second thing to do is to report it to the hoster, lots of disreputable hosters out there don't care what they host but commonly the hosting is purchased with stolen credit cards so make sure to mention this to them when you complain, they certainly care about themselves been the victim of fraud, the same with the domain name registar.

The only other thing you can really do is educate your site visitors.

bert

Screaming Monkey

I wouldn't bother my arse reporting the email addresses to the big ISP/Providers....

But if you want to help the phishing fight..These guys are quite good http://www.phishtank.com/
and most of the big ISPs and AV companies plug into them..They also have a nice API which could be integrated into your anti-phishing system

voodoo

hi there,

also came across this free tool which is quite good - www.siteadvisor.com

jabberwock

thanks for the responses guys.

was thinking that myself about the big providers when I was asked to do it.

I'm in the phishtank constantly. Handy site although they can be a bit cocky at times.

As for buying up the domain names.... these phishers are at the stage where they are barely trying to disguise the domain.

They're using Romanian and Russian Hosting companies predominately, throwing in a few Europeans the odd time.

The problem is that they have a very good copy of our login page atm. Some member education is needed I think myself.