[How to] Ruin a phisher's day {Going beyond the "Report" button}

Sup.

Don't really know where to put it, but it's for the bettering of RS communities so I don't see a reason why I shouldn't be allowed to post this, if it needs moving please go ahead.

====================================================================​

I've been seeing a lot of 11yr olds making like 10+ accounts and trying to phish with their shitty sites, and I know a lot of you know to hit the report button, but what's to stop them from just re-posting? Nothing, which is why I'm making this guide.

I have yet to run into a phishing website I haven't been able to get terminated/suspended, I'm not saying this will work 100% of the time, but it has so far for me.

There are simply 2 parts:

1. Investigating
2. Reporting

It may seem like a lot, but that's just because I made this guide so even a 7yr old could follow it.

====================================================================​

Part 1: Identifying



So as you can see here, we have a attempt at phishing(which might I say is by far the most revolting attempt to phish I've ever seen):

​

First thing we are going to want to do is copy the link, there is no need to visit it as it might log your IP just by doing so, I love to visit them on a proxy just to see how bad they are.

Next you paste it into your browser, but don't hit enter, instead look for the top-level domain(ex. instead of services.runescape.com the top-level domain is "runescape.com") and copy it:

​

Next you're gonna want to go to http://who-hosts.com/ , this will tell you who is hosting the phishing website, input the domain(mentioned above) and click OK

We should get something like so:

​

Now we simply visit the site and look for a "Contact us" or "Report abuse":

​

====================================================================​

Part 2: Reporting



Now that we have an abuse email, we can report the website. Use any email you like, the more reports the better.


I have a few formats of which you can copy and paste if you like, or you can write up your own. All you need to do is fill in the info where needed.



Template 1:

Template 2:

Send it and you're done, you've done your part in the fight against phishing and for that I applaud you.

 

woah, this is great. hahaha i hate phisers, ( although i never got phished once before ) but i would be too lazy to follow through and get their account suspended! But anyway thanks for this guide, punish those phishers!

 

Interesting. Very clever that you put all of this together.

 

Amazing guide, but it there are thousands of Runescape phishing sites and it'll be impossible to take them all down with this method. Thanks for sharing though.

 

just think how many people are targeted with those sites, I am merely spreading the knowledge of how to take action so they can do something about it instead of it just being left for the next target



Thanks for the replies guys.

 

Informative guide, but you can easily just let Jagex know about the site on their "report a phisher" thread in the RS forums, they usually get sites like that taken down within 48 hours. Still if you want to take it upon yourself to do it then this guide is useful for that.

 

Great guide, much love. - Chase

 

Very good guide I'm bookmarking... I normally report then go to it via proxy and use a bunch of offensive fake info ;p

 

Hah, very basic guide; although I already knew this; I never really bothered.

 

Wow, not bad.

Although this might stop one or two phishers, they will simply keep coming back, and if it's not them then it's others.

 

True, but as I said if every phisher targets 10 people(more like 100+), and just one of those people do something(be it this guide or a jagex report) then who has the advantage in the end? Not to mention you would be kind of wasting their money since a lot of free hosts manually check content every now and again.

Thanks for the compliments.

 

Not a bad guide at all. I like to spam on the phishing site with a proxy, like put accouunt name: I love when
pass: you fail at phishing
and do that like 50 times ;D

 

@ Pleasure, yea i do that every time i get an email, tell em they suck and suck my dick and stuff on the "login info" sections. One asked for a bank pin too so I could log in to get a free runescape membership, how lame is that?

@OP--- This is really great, I know not everyone will do this or see how even a little could help. I know people will always try to phish but every little bit counts and who knows, maybe if the users start acting out on their own free will the bigger corporations (jagex and the web hosting sites) will start to take notice and realize its a big issue and use their power to help. Not that I am against botting, I'm not and was an avid botter, but I feel that jagex took action because they saw it was ruining the community, and every "bot hunt" and guide on how to break bots that was released, it showed that the users really cared about botting and they wanted change, no people breaking bots alone couldn't ever have stopped botting or put it in the phase it's in now, but jagex noticed and now bots are ages behind what they were 6 months ago.

All I'm saying is that for someone who doesn't mind taking 10 mins out of their day to get a lame phishing account banned, and especially to the OP who posted this, then maybe eventually someone with more power than the everyday user will notice and take charge. Even if that never happens, one less crappy 10 cent phishing site out there can't hurt. Thanks

 

interesting guide

 

Thanks for the guide But in my opinion you should ignore all the phishing stuff, beacause there are so many phishers that we cannot stop them all.

 

Well said.

Thanks for the comments everyone.

 

This is clever and I my try this when I get one of these pms again. Very well written and descriptive!

 

Oh, awesome. I'll probably do this in the fture.
Thanks for taking your time to write this!

 

Sweet Thanks for putting this up.

 

haha thats awesome seems like alotta work though