News for hackers. Stuff that matters.

Ask HN: Found a phishing site. Is there anyway to get it taken down?

Hello, I'm from Colombia and recently my friend got scammed out of 1'000.000 COP (roughly 250 USD) at this site: https://segurossoat.online. The scam ocurred two days ago and the site is currently still up.

I was wondering if there was anyway to get the site taken down and if there was a way to get my friend's money back.

I'd appreciate any help, thanks in advance.

( 14 comments | on HN )
Re:Ask HN: Found a phishing site. Is there anyway to get it ... by coderintherye on Sunday June 25, 2023 @12:43AM (#36465196)
Report it at: https://safebrowsing.google.com/safebrowsing/report_phish/?h...

The more people that report it, the more likely it is that at least Chrome users will get a warning when visiting it.

You could also try reporting it to the TLD owner of .online which is Radix: https://radix.website/report-abuse

Re:Ask HN: Found a phishing site. Is there anyway to get it ... by gordouwarrior on Monday June 26, 2023 @05:20PM (#36486020)
It worked! The site got taken down today. Thanks
Re:Ask HN: Found a phishing site. Is there anyway to get it ... by ezedv on Tuesday June 27, 2023 @03:00PM (#36497232)
Excellent work!
Re:Ask HN: Found a phishing site. Is there anyway to get it ... by nicbou on Sunday June 25, 2023 @03:12AM (#36465722)
Report it to the hosting company. It always works for phishing copies of my website that pop up every few weeks.
Re:Ask HN: Found a phishing site. Is there anyway to get it ... by throwaway019254 on Sunday June 25, 2023 @03:18AM (#36465744)
Hosting company: [email protected]
Re:Ask HN: Found a phishing site. Is there anyway to get it ... by revskill on Sunday June 25, 2023 @04:20AM (#36466040)
Tell HN ?
Re:Ask HN: Found a phishing site. Is there anyway to get it ... by jonathantf2 on Sunday June 25, 2023 @04:24AM (#36466063)
Try https://phish.report - although if the site is behind Cloudflare there’s basically zero chance they’ll take it down.
Re:Ask HN: Found a phishing site. Is there anyway to get it ... by palikero93 on Sunday June 25, 2023 @10:20AM (#36468418)
Why?
Re:Ask HN: Found a phishing site. Is there anyway to get it ... by themoonisachees on Sunday June 25, 2023 @12:03PM (#36469660)
Cloud flare famously does not comply to take down requests. The last (and only) time they did so was for kiwi farms, which was after mass outrage for several days.
Re:Ask HN: Found a phishing site. Is there anyway to get it ... by viraptor on Sunday June 25, 2023 @06:22AM (#36466672)
Few ways:

- you can contact their hosting/DNS provider by checking the whois entry for the domain and the resolved IP

- you can report them to industry big names like Google (through safe browsing https://safebrowsing.google.com/safebrowsing/report_phish/?h...)

- you can report them to community projects like Phishtank (they get used by opendns and others)

- you can find a local LE provided website where you can report it (not sure what your local would be but Australia has https://www.scamwatch.gov.au/ for example)

Re:Ask HN: Found a phishing site. Is there anyway to get it ... by zaphirplane on Sunday June 25, 2023 @07:27AM (#36467083)
What’s the nature of the scam out of curiosity
Re:Ask HN: Found a phishing site. Is there anyway to get it ... by gordouwarrior on Sunday June 25, 2023 @10:29PM (#36475028)
Fake car insurance.

In Colombia there's a mandatory type of car insurance called SOAT. You have to renew it annually and it's frequently asked for when you are pulled over by the cops. This fake site is supposed to allow you to either buy or renew the SOAT.

Re:Ask HN: Found a phishing site. Is there anyway to get it ... by m-p-3 on Sunday June 25, 2023 @09:21AM (#36467940)
I use these paths to take it down

* Report to https://safebrowsing.google.com/safebrowsing/report_phish/

* Report to https://www.phishtank.com (account required)

* Use a WHOIS lookup service for the hostname, find who's the registrar and submit an abuse report to them.

Re:Ask HN: Found a phishing site. Is there anyway to get it ... by kusha on Sunday June 25, 2023 @08:47PM (#36474298)
> * Use a WHOIS lookup service for the hostname, find who's the registrar and submit an abuse report to them.

I used to regularly report Runescape phishing sites, reporting to the registrar is extremely effective and quite fast