HN Explorer

Ask HN: How to stop phishing site ASAP?

3 points by rkuodys ↗ HN
Hi, I'm working at staffing agency and some bad actor had created a web page for phishing purposes - she created form to enter details and upload documents as if for employment contract creation. We reported to policed, wrote to Domain registry, reported on https://safebrowsing.google.com/. What else can we do to take down the domain, before more people becomes victim.

2 comments

[ 3.1 ms ] story [ 15.1 ms ] thread
LinuxBender
Look up information about the site [1] the IP [2] then contact their hosting provider, their network provider, their domain provider and provide them a reason why the site is a financial risk to them. Just know and accept that the phishing site will just move to another compromised host in seconds. It is an endless game of whack-a-mole.

If the site is infringing on your companies brand, intellectual property, etc... then there are other paths your legal team could take but finding the people running the site may prove challenging. Most of these are just running atop of compromised blogs.

[1] - https://www.robtex.com/

[2] - https://bgp.he.net/

toast0
Like LinuxBender said, complain to all their providers.

Domain registry, domain registrar, website host, website IP owner, DNS host, mail host, payment vendor (if you can tell), certificate authority, if they've got a phone number (especially a toll free number), etc. Some of these might the same places.

I think Microsoft and Mozilla might also run safebrowsing initiatives, worth checking with them too?

If you're in the US, be sure to report to federal law enforcement as well as local; although you might not get much action.