Member Avatar for The Dude

In one of my throw away email accounts i got this message with this link to "update my bank info" :D

>snipped<

Notice how you can enter ANYTHING and click next (I entered all bogus data :D)

Sadly though,there are people that do fall for these things and its sad.......

Here is the real site for this bank :)

  • 2 Contributors
  • 2 Replies
  • 113 Views
  • 1 Day Discussion Span
  • Latest Post Latest Post by The Dude

Dani AI

Generated

Good catch and nice follow-up from . Below are practical next steps and reporting options that are useful whenever a bank-looking page or credential-collection form turns up.

If there’s any chance credentials were entered, act immediately from a known-clean device: change the bank password and any accounts that used the same password; enable two-factor authentication; contact the bank using the phone number on the back of the card or the bank’s official website and ask to monitor or freeze the account; review recent transactions and set up alerts; run a full anti-malware scan and remove any suspicious browser extensions. Do not reuse passwords and remove any credentials saved in browsers or password managers that might have been exposed.

Collect evidence before it disappears: save the phishing email (do not click links again), capture full email headers or message source, take screenshots, and note the exact URL and timestamp. You can quickly identify hosting/registrar details and abuse contacts with basic DNS/WHOIS checks:

# find IP and nameserver
nslookup bad-example.com

# find registrar and abuse contact
whois bad-example.com

Report the page widely so it gets taken down faster. Submit the URL to browser/blocklists and anti-phishing services and to law enforcement or consumer protection in your jurisdiction. Useful reporting pages include the Google Safe Browsing report page, the , PhishTank, and (for US incidents) the . When reporting, include headers, screenshots, timestamps, the full URL, and any whois/ip info you gathered.

For prevention: use a password manager and unique passwords, keep software patched, prefer bookmarked or official bank apps/sites instead of email links, and enable MFA wherever available.

Recommended Answers

All 2 Replies

Member Avatar for Google Spider

Haha...nice one!
See what they say in the end :


For Security reasons please close your internet browser, Thank you for your co-operation.

Close the browser so you don't know you've been phised. :D

I suppose you have already informed the bank.

Member Avatar for The Dude

Yes they dont want ya to realize what you just did :(

The site has been reported but sadly is still up.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.