Login Register




The stories and information posted here are artistic works of fiction and falsehood. Only a fool would take anything posted here as fact.


Help shut down a phishing page? filter_list
Author
Message
Help shut down a phishing page? #1
Hey guys, this link has been spreading around Facebook all night. I've received it 8 times.

How would you go about having it shut down?

DO NOT PUT IN FACEBOOK LOGIN INFO IN THE LINK IN THE SPOILER BELOW! IT IS A PHISHING SITE!
Spoiler:
http://facebook.com.accounts.login.userid.411590.tumfun.pw/zxw/fbn/?next=http%3A%2F%2Fwww.facebook.com%2videos%2F%3AJ%4ID%1A

Reply

RE: Help shut down a phishing page? #2
This website has been already discovered by google (Chrome warns of "Phishing ahead")

here is whois of the domain:
Code:
This whois service is provided by CentralNic Ltd and only contains information pertaining to Internet domain names we have registered for our customers. By using this service you are agreeing (1) not to use any information presented here for any purpose other than determining ownership of domain names, (2) not to store or reproduce this data in any way, (3) not to use any high-volume, automated, electronic processes to obtain data from this service. Abuse of this service is monitored and actions in contravention of these terms will result in being permanently blacklisted. All data is (c) CentralNic Ltd https://www.centralnic.com/ Domain ID:CNIC-DO1597276 Domain Name:TUMFUN.PW Created On:2013-11-05T21:44:47.0Z Last Updated On:2013-11-05T21:44:51.0Z Expiration Date:2014-11-05T23:59:59.0Z Status:TRANSFER PROHIBITED Registrant ID:IIPK4M2I1DLSJLO3 Registrant Name:WhoisGuard Protected Registrant Organization:WhoisGuard, Inc. Registrant Street1:P.O. Box 0823-03411 Registrant City:Panama Registrant State/Province:Panama Registrant Postal Code:NA Registrant Country:PA Registrant Phone:+507.8365503 Registrant FAX:+51.17057182 Registrant Email:5848b1e606734ef9ad79d22ccf4ebf10.protect@whoisguard.com Admin ID:HZY1E4DYLSBKEDPW Admin Name:WhoisGuard Protected Admin Organization:WhoisGuard, Inc. Admin Street1:P.O. Box 0823-03411 Admin City:Panama Admin State/Province:Panama Admin Postal Code:NA Admin Country:PA Admin Phone:+507.8365503 Admin FAX:+51.17057182 Admin Email:5848b1e606734ef9ad79d22ccf4ebf10.protect@whoisguard.com Tech ID:YEEWN3LUZIUWJ5XG Tech Name:WhoisGuard Protected Tech Organization:WhoisGuard, Inc. Tech Street1:P.O. Box 0823-03411 Tech City:Panama Tech State/Province:Panama Tech Postal Code:NA Tech Country:PA Tech Phone:+507.8365503 Tech FAX:+51.17057182 Tech Email:5848b1e606734ef9ad79d22ccf4ebf10.protect@whoisguard.com Billing ID:JNECKLX4E5V1K5ZY Billing Name:WhoisGuard Protected Billing Organization:WhoisGuard, Inc. Billing Street1:P.O. Box 0823-03411 Billing City:Panama Billing State/Province:Panama Billing Postal Code:NA Billing Country:PA Billing Phone:+507.8365503 Billing FAX:+51.17057182 Billing Email:5848b1e606734ef9ad79d22ccf4ebf10.protect@whoisguard.com Sponsoring Registrar ID:H1772673 Sponsoring Registrar IANA ID:1068 Sponsoring Registrar Organization:Namecheap Sponsoring Registrar Street1:11400 W Olympic Blvd. Sponsoring Registrar Street2:Suite 200 Sponsoring Registrar City:Los Angeles Sponsoring Registrar State/Province:CA Sponsoring Registrar Postal Code:90064 Sponsoring Registrar Country:US Sponsoring Registrar Phone:0123456789 Sponsoring Registrar FAX:0123 456 789 Sponsoring Registrar Website:http://www.namecheap.com Name Server:NS1.TUMFUN.PW Name Server:NS2.TUMFUN.PW DNSSEC:Unsigned

You can find out that sponsoring registrar is namecheap.com so you can contact them directly.
Last but not least, you can report it to the authorities. Since Namecheap is US based, you could go ahead and send a report here: http://www.us-cert.gov/report-phishing


The thing with phishing sites is, that you should NEVER try to take them down with a questionable method (hacking them etc.) because this way, they can say: "Our website was legal until the hacker came here" and you will be the one blamed. If you want to take it really seriously, take screen shots etc. as evidence in-case they change the website. Don't forget to write down the time when the screen shot was taken Smile

Hope I helped ^^
Staff will never ever ask you for your personal information.
We know everything about you anyway.

Reply

RE: Help shut down a phishing page? #3
(11-15-2013, 01:03 PM)1llusion Wrote: This website has been already discovered by google (Chrome warns of "Phishing ahead")

here is whois of the domain:
Code:
This whois service is provided by CentralNic Ltd and only contains information pertaining to Internet domain names we have registered for our customers. By using this service you are agreeing (1) not to use any information presented here for any purpose other than determining ownership of domain names, (2) not to store or reproduce this data in any way, (3) not to use any high-volume, automated, electronic processes to obtain data from this service. Abuse of this service is monitored and actions in contravention of these terms will result in being permanently blacklisted. All data is (c) CentralNic Ltd https://www.centralnic.com/ Domain ID:CNIC-DO1597276 Domain Name:TUMFUN.PW Created On:2013-11-05T21:44:47.0Z Last Updated On:2013-11-05T21:44:51.0Z Expiration Date:2014-11-05T23:59:59.0Z Status:TRANSFER PROHIBITED Registrant ID:IIPK4M2I1DLSJLO3 Registrant Name:WhoisGuard Protected Registrant Organization:WhoisGuard, Inc. Registrant Street1:P.O. Box 0823-03411 Registrant City:Panama Registrant State/Province:Panama Registrant Postal Code:NA Registrant Country:PA Registrant Phone:+507.8365503 Registrant FAX:+51.17057182 Registrant Email:5848b1e606734ef9ad79d22ccf4ebf10.protect@whoisguard.com Admin ID:HZY1E4DYLSBKEDPW Admin Name:WhoisGuard Protected Admin Organization:WhoisGuard, Inc. Admin Street1:P.O. Box 0823-03411 Admin City:Panama Admin State/Province:Panama Admin Postal Code:NA Admin Country:PA Admin Phone:+507.8365503 Admin FAX:+51.17057182 Admin Email:5848b1e606734ef9ad79d22ccf4ebf10.protect@whoisguard.com Tech ID:YEEWN3LUZIUWJ5XG Tech Name:WhoisGuard Protected Tech Organization:WhoisGuard, Inc. Tech Street1:P.O. Box 0823-03411 Tech City:Panama Tech State/Province:Panama Tech Postal Code:NA Tech Country:PA Tech Phone:+507.8365503 Tech FAX:+51.17057182 Tech Email:5848b1e606734ef9ad79d22ccf4ebf10.protect@whoisguard.com Billing ID:JNECKLX4E5V1K5ZY Billing Name:WhoisGuard Protected Billing Organization:WhoisGuard, Inc. Billing Street1:P.O. Box 0823-03411 Billing City:Panama Billing State/Province:Panama Billing Postal Code:NA Billing Country:PA Billing Phone:+507.8365503 Billing FAX:+51.17057182 Billing Email:5848b1e606734ef9ad79d22ccf4ebf10.protect@whoisguard.com Sponsoring Registrar ID:H1772673 Sponsoring Registrar IANA ID:1068 Sponsoring Registrar Organization:Namecheap Sponsoring Registrar Street1:11400 W Olympic Blvd. Sponsoring Registrar Street2:Suite 200 Sponsoring Registrar City:Los Angeles Sponsoring Registrar State/Province:CA Sponsoring Registrar Postal Code:90064 Sponsoring Registrar Country:US Sponsoring Registrar Phone:0123456789 Sponsoring Registrar FAX:0123 456 789 Sponsoring Registrar Website:http://www.namecheap.com Name Server:NS1.TUMFUN.PW Name Server:NS2.TUMFUN.PW DNSSEC:Unsigned

You can find out that sponsoring registrar is namecheap.com so you can contact them directly.
Last but not least, you can report it to the authorities. Since Namecheap is US based, you could go ahead and send a report here: http://www.us-cert.gov/report-phishing


The thing with phishing sites is, that you should NEVER try to take them down with a questionable method (hacking them etc.) because this way, they can say: "Our website was legal until the hacker came here" and you will be the one blamed. If you want to take it really seriously, take screen shots etc. as evidence in-case they change the website. Don't forget to write down the time when the screen shot was taken Smile

Hope I helped ^^


You know, I hadn't thought of that, you're a smart cookie! I submitted a report, & as well had each member of my team report the site as well. Thanks for your help!

Reply