Results 1 to 7 of 7

Thread: Potential Phishing Threat

  1. #1
    Senior Member
    intelliGEORGE's Avatar
    Join Date
    Jan 2008
    Location
    Sydney, AUSTRALIA
    Age
    43
    Posts
    4,106
    Thanks
    884
    Thanked 1,484 Times in 691 Posts
    Rep Power
    479
    Reputation
    7236

    Default Potential Phishing Threat

    Just received this email from google. Has anyone had this issue before? I am looking at trying to resolve this but can't find anywhere on my site that refers to what they are. Any help would be appreciated.



    Dear site owner or webmaster of intellihouse.com.au,

    We recently discovered that some pages on your site look like a possible phishing attack, in which users are encouraged to give up sensitive information such as login credentials or banking information. We have removed the suspicious URLs from Google.com search results and have begun showing a warning page to users who visit these URLs in certain browsers that receive anti-phishing data from Google.

    Below are one or more example URLs on your site which may be part of a phishing attack:

    .com.au/~xxxxxx07/signon/Start.php
    .com.au/~xxxxxx07/signon Start.php?jsessionid=0000aW54hkg0Wa50j_FB4IF0w72:1 2ntf16af?idv_cmd=idv.Logon&nextPage=IDV_CAM10_AUTH ENTICATION

    We strongly encourage you to investigate this immediately to protect users who are being directed to a suspected phishing attack being hosted on your web site. Although some sites intentionally host such attacks, in many cases the webmaster is unaware because:

    1) the site was compromised
    2) the site doesn't monitor for malicious user-contributed content

    If your site was compromised, it's important to not only remove the content involved in the phishing attack, but to also identify and fix the vulnerability that enabled such content to be placed on your site. We suggest contacting your hosting provider if you are unsure of how to proceed.

    Once you've secured your site, and removed the content involved in the suspected phishing attack, or if you believe we have made an error and this is not actually a phishing attack, you can request that the warning be removed by visiting

    ?tpl=emailer

    and reporting an "incorrect forgery alert." We will review this request and take the appropriate actions.

    Sincerely,
    Google Search Quality Team
    Note: if you have an account in Google's Webmaster Tools, you can verify the authenticity of this message by logging into and going to the Message Center, where a warning will appear shortly.



Look Here ->
  • #2
    Senior Member
    Philquad's Avatar
    Join Date
    Jan 2008
    Location
    nelson bay
    Age
    55
    Posts
    3,872
    Thanks
    192
    Thanked 1,305 Times in 783 Posts
    Rep Power
    665
    Reputation
    16938

    Default

    which is your site george
    ill wack it in my google account to vertify it

  • #3
    Senior Member
    intelliGEORGE's Avatar
    Join Date
    Jan 2008
    Location
    Sydney, AUSTRALIA
    Age
    43
    Posts
    4,106
    Thanks
    884
    Thanked 1,484 Times in 691 Posts
    Rep Power
    479
    Reputation
    7236

    Default

    it's

    The index page is fine however according to the link provided in the google email it looks like a phishing page to some european bank.

    Quote Originally Posted by Philquad View Post
    which is your site george
    ill wack it in my google account to vertify it
    Last edited by intelliGEORGE; 26-06-10 at 08:11 PM.

  • #4
    Senior Member
    Philquad's Avatar
    Join Date
    Jan 2008
    Location
    nelson bay
    Age
    55
    Posts
    3,872
    Thanks
    192
    Thanked 1,305 Times in 783 Posts
    Rep Power
    665
    Reputation
    16938

    Default

    woot
    u are now google vertified

  • #5
    Senior Member
    intelliGEORGE's Avatar
    Join Date
    Jan 2008
    Location
    Sydney, AUSTRALIA
    Age
    43
    Posts
    4,106
    Thanks
    884
    Thanked 1,484 Times in 691 Posts
    Rep Power
    479
    Reputation
    7236

    Default

    I don't get it? Why was the email sent to me, I even saw the phising page in my URL.

  • #6
    Senior Member
    Philquad's Avatar
    Join Date
    Jan 2008
    Location
    nelson bay
    Age
    55
    Posts
    3,872
    Thanks
    192
    Thanked 1,305 Times in 783 Posts
    Rep Power
    665
    Reputation
    16938

    Default

    its strange considering your sites htm not php
    can you access the ftp? is there a folder in there ~xxxxxx07 ?

  • #7
    Senior Member
    intelliGEORGE's Avatar
    Join Date
    Jan 2008
    Location
    Sydney, AUSTRALIA
    Age
    43
    Posts
    4,106
    Thanks
    884
    Thanked 1,484 Times in 691 Posts
    Rep Power
    479
    Reputation
    7236

    Default

    Quote Originally Posted by Philquad View Post
    its strange considering your sites htm not php
    can you access the ftp? is there a folder in there ~xxxxxx07 ?
    I put the xxxxx in the URL so no one would follow it. I have logged in to FTP and could not find any PHP files or directories, but when I followed the link issued by google it took me to the phishing page.

  • Bookmarks

    Posting Permissions

    • You may not post new threads
    • You may not post replies
    • You may not post attachments
    • You may not edit your posts
    •