Ask HN: Found a phishing site. Is there anyway to get it taken down?

[gordouwarrior]

Hello, I'm from Colombia and recently my friend got scammed out of 1'000.000 COP (roughly 250 USD) at this site: https://segurossoat.online. The scam ocurred two days ago and the site is currently still up.

I was wondering if there was anyway to get the site taken down and if there was a way to get my friend's money back.

I'd appreciate any help, thanks in advance.

[coderintherye]

Report it at: https://safebrowsing.google.com/safebrowsing/report_phish/?h...

The more people that report it, the more likely it is that at least Chrome users will get a warning when visiting it.

You could also try reporting it to the TLD owner of .online which is Radix: https://radix.website/report-abuse

[gordouwarrior → coderintherye]

It worked! The site got taken down today. Thanks

[ezedv → gordouwarrior]

Excellent work!

[m-p-3]

I use these paths to take it down

* Report to https://safebrowsing.google.com/safebrowsing/report_phish/

* Report to https://www.phishtank.com (account required)

* Use a WHOIS lookup service for the hostname, find who's the registrar and submit an abuse report to them.

[kusha → m-p-3]

> * Use a WHOIS lookup service for the hostname, find who's the registrar and submit an abuse report to them.

I used to regularly report Runescape phishing sites, reporting to the registrar is extremely effective and quite fast

[nicbou]

Report it to the hosting company. It always works for phishing copies of my website that pop up every few weeks.

[throwaway019254 → nicbou]

Hosting company: abuse@bluehost.com

[viraptor]

Few ways:

- you can contact their hosting/DNS provider by checking the whois entry for the domain and the resolved IP

- you can report them to industry big names like Google (through safe browsing https://safebrowsing.google.com/safebrowsing/report_phish/?h...)

- you can report them to community projects like Phishtank (they get used by opendns and others)

- you can find a local LE provided website where you can report it (not sure what your local would be but Australia has https://www.scamwatch.gov.au/ for example)

[jonathantf2]

Try https://phish.report - although if the site is behind Cloudflare there’s basically zero chance they’ll take it down.

[palikero93 → jonathantf2]

Why?

[themoonisachees → palikero93]

Cloud flare famously does not comply to take down requests. The last (and only) time they did so was for kiwi farms, which was after mass outrage for several days.

[zaphirplane]

What’s the nature of the scam out of curiosity

[gordouwarrior → zaphirplane]

Fake car insurance.

In Colombia there's a mandatory type of car insurance called SOAT. You have to renew it annually and it's frequently asked for when you are pulled over by the cops. This fake site is supposed to allow you to either buy or renew the SOAT.

[revskill]

Tell HN ?