xyz domains registered with Namesilo continuously phishing users

Quote:

---

Originally Posted by Awha

Might just be a dick, but if people fall for that stuff . . . well sorry but how can one be expected to help someone who falls for stuff like that?

---

Because honestly, people by and large don't practice proper internet security like they should be. The page the scammers use looks pretty legit to anyone who's not extremely familiar with the forums or the login-screens for the lodestone and for many people who are just going through the motions or wanting to see what this 'update' is about, they may not take the time to actually dissect the page they're sent to.

Let me tell ya a fun statistic from my workplace last year. IT wanted to run a test to see how many employees would willingly give up their password to an email account that was almost identical to the admin's, except with a few letters/numbers changed in the name. 36% of people in the workplace fell for the IT test's trap. 36%.

And that's with the company doing routine password security meetings/notifications/etc.

There'll always be people falling for these things due to the nature of people, but it takes Square very little effort to stay on top of the latest scams and give big warnings in the launcher about them to potentially inform someone who may have fallen for this scam otherwise. The only way to help these people is through preventative measures and hope they work.

Just got message from their support. They placed the domain on ClientHold status, which now blocks the page from loading. I'm sure they'll have another one registered before long, but it's something. Doing Hydaelyn's work here folks.

Also you can try to report phising websites to Google Safe Browsing.
https://safebrowsing.google.com/safe...t_phish/?hl=en

Most major browsers use it.

"Google Safe Browsing is a blacklist service provided by Google that provides lists of URLs for web resources that contain malware or phishing content. The Google Chrome, Safari, Firefox, Vivaldi, and GNOME Web browsers use the lists from the Google Safe Browsing service for checking pages against potential threats." -Wikipedia

It kind of bugs me that they're even allowed to register domains that are almost identical to the official ones in the first place.

Quote:

---

Originally Posted by MariaArvana

Let me tell ya a fun statistic from my workplace last year. IT wanted to run a test to see how many employees would willingly give up their password to an email account that was almost identical to the admin's, except with a few letters/numbers changed in the name. 36% of people in the workplace fell for the IT test's trap. 36%.

---

Reminds me of the one time I got an email, from our "CEO", wanting me to transfer money to our clients in Hong Kong. Now, the thing about the company, they were a North American oilfield trucking company. We had no clients anywhere except in a few locations in the US(Texas, Oklahoma, North Dakota, Ohio, Pennsylvania, and briefly in Wyoming and Florida), and a little bit in Canada. Definitely nothing outside of US And Canada, not even where payments were sent to.