phishing attack

doodlebug · 21-01-2012, 07:24:24 PM

I got a message from noreply@google.com saying that my site greatlever.com is a suspected phishing site ?

It's not but what can I do about this ?
It's only happened since I launched a pop3 account Yesterday which is admin(at)greatlever.com

Could be related to one of my aff banners ?

Anyone shed some light please ?

Brassneck · 21-01-2012, 07:37:27 PM

Are you sure it is from Google? I've had messages saying I have been banned from Adsense but they were fake.

Hope it is a fake.

Stephen

Brassneck · 21-01-2012, 07:39:06 PM

PS. Your site is still indexed - I would assume Google would deindexed such sites pretty quickly if they were a real threat.

wb · 21-01-2012, 07:49:52 PM

Carefully check through all the files on your server to make sure you haven't been hacked and had phishing files uploaded (could be located in obscure directories to hide them, looking at modified dates should help).

doodlebug · 21-01-2012, 07:52:15 PM

Quote:

Originally Posted by Brassneck

PS. Your site is still indexed - I would assume Google would deindexed such sites pretty quickly if they were a real threat.

The sender address is from noreply@google.com and I hovered over the link and that's what it says

It does contain a link saying click here to the warning signs shown on Google but I got suspicious and didn't click it.

I checked SERPS and I am still happily ranking for certain terms, there is no warning sign against the results and no message in my Adsense account, in fact I am pretty sure that my G ads would have been removed from my site.

Looks dodgy and I'm inclined to ignore it for now, Google have my mobile phone number if it bothers them that much.

Thanks for your replies Stephen

doodlebug · 21-01-2012, 07:53:41 PM

Quote:

Originally Posted by wb

Carefully check through all the files on your server to make sure you haven't been hacked and had phishing files uploaded (could be located in obscure directories to hide them, looking at modified dates should help).

Going to look through my files but I use a site create and don't have full access to them so going to contact the site provider asap.

Thanks

Brassneck · 21-01-2012, 08:02:10 PM

Quote:

Originally Posted by doodlebug

The sender address is from noreply@google.com and I hovered over the link and that's what it says

It does contain a link saying click here to the warning signs shown on Google but I got suspicious and didn't click it.

I checked SERPS and I am still happily ranking for certain terms, there is no warning sign against the results and no message in my Adsense account, in fact I am pretty sure that my G ads would have been removed from my site.

Looks dodgy and I'm inclined to ignore it for now, Google have my mobile phone number if it bothers them that much.

Thanks for your replies Stephen

Check out the source code for the email - you might be able to work out where the email really came from.

wb · 21-01-2012, 08:02:38 PM

Also, check the website on Google Webmaster Tools as it should show a warning on there too if genuine.

Lovekraft · 21-01-2012, 08:20:16 PM

I usually find copying and pasting the exact wording of the email into google will bring up similar cases if it is a phishing attack.

doodlebug · 21-01-2012, 08:28:07 PM

Thanks for your replies, am waitin for a reply from my host but could be monday

I wont lose any sleep for now, bloody nightmare !

21-01-2012, 07:24:24 PM	#1 (permalink)
doodlebug Join Date: Mar 2007 Location: This time next year we'll be millionaires ! Posts: 4,652 No Classified Ratings Domain Trader Rating: (100% / 32)	phishing attack I got a message from noreply@google.com saying that my site greatlever.com is a suspected phishing site ? It's not but what can I do about this ? It's only happened since I launched a pop3 account Yesterday which is admin(at)greatlever.com Could be related to one of my aff banners ? Anyone shed some light please ? __________________ No links for me thanks ! Last edited by doodlebug; 21-01-2012 at 07:27:48 PM. Reason: punctuation

21-01-2012, 07:37:27 PM	#2 (permalink)
Brassneck Join Date: Apr 2005 Location: Surrey, UK Posts: 2,068 No Classified Ratings Domain Trader Rating: (100% / 73)	Are you sure it is from Google? I've had messages saying I have been banned from Adsense but they were fake. Hope it is a fake. Stephen __________________ XEC Internet Domain Name Services Cheap Hotel Finder Top Christmas Toys Sussex Parenting Tips Haslemere

21-01-2012, 07:39:06 PM	#3 (permalink)
Brassneck Join Date: Apr 2005 Location: Surrey, UK Posts: 2,068 No Classified Ratings Domain Trader Rating: (100% / 73)	PS. Your site is still indexed - I would assume Google would deindexed such sites pretty quickly if they were a real threat. __________________ XEC Internet Domain Name Services Cheap Hotel Finder Top Christmas Toys Sussex Parenting Tips Haslemere

21-01-2012, 08:20:16 PM	#9 (permalink)
Lovekraft Join Date: Mar 2010 Location: Scotland Posts: 479 No Classified Ratings Domain Trader Rating: (100% / 11)	I usually find copying and pasting the exact wording of the email into google will bring up similar cases if it is a phishing attack. __________________ Pokerdealer.co.uk Telnet.co.uk

21-01-2012, 08:28:07 PM	#10 (permalink)
doodlebug Join Date: Mar 2007 Location: This time next year we'll be millionaires ! Posts: 4,652 No Classified Ratings Domain Trader Rating: (100% / 32)	Thanks for your replies, am waitin for a reply from my host but could be monday I wont lose any sleep for now, bloody nightmare ! __________________ No links for me thanks !

21-01-2012, 07:49:52 PM	#4 (permalink)
wb Join Date: Mar 2009 Posts: 1,922 No Classified Ratings Domain Trader Rating: (100% / 29)	Carefully check through all the files on your server to make sure you haven't been hacked and had phishing files uploaded (could be located in obscure directories to hide them, looking at modified dates should help).

21-01-2012, 08:02:38 PM	#8 (permalink)
wb Join Date: Mar 2009 Posts: 1,922 No Classified Ratings Domain Trader Rating: (100% / 29)	Also, check the website on Google Webmaster Tools as it should show a warning on there too if genuine.

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
Thread	Thread Starter	Domain Name Community	Replies	Last Post
Two-Thirds Of All Phishing Attacks Generated By A Single Criminal Group ... - Dark Re	RSS	Domain Name News	0	12-05-2010 11:59:18 PM
HMRC Phishing site on .gov.uk!	devolution	Domain Name News	1	27-09-2009 02:33:55 AM
Global Phishing Survey: 81 % of Domain Names Used For Phishing Are ... - Domain infor	RSS	Domain Name News	0	29-05-2009 03:59:14 PM
Network Solutions Phishing Came Before Web Attack - PC World	RSS	Domain Name News	0	05-12-2008 09:59:08 AM
sedo under DOS attack	zee	Sedo	3	21-08-2005 06:15:05 PM