3

Is there a central place to report domains that have made phishing attempts against my users? I usually make a report to the host of the domain (GoDaddy, generally) but I was wondering if there is a more effective place to send a report?

Richard
  • 133

2 Answers2

4

You can report suspected phishing attempts to the Department of Homeland Security's US Computer Emergency Readiness Team (US-CERT) by forwarding the email in question to this address:

phishing-report@us-cert.gov

More information can be found here:

https://www.us-cert.gov/report-phishing

freginold
  • 239
1

Got Phish?

At the moment, the eminent SwiftOnSecurity maintains the following list of anti-phishing resources:

This is an excellent and exhaustive resource for reporting phishing sites to a multitude of online anti-phishing services, including Google Safe Browsing. It also includes links to tools that can be used to safely determine whether or not a site contains dangerous content.

Note for posterity: gotphish.com currently redirects to https://decentsecurity.com/#/malware-web-and-phishing-investigation/. I'd like to avoid plagiarizing this website's original content, but can reproduce some of it here if necessary so that this answer remains relevant.

Arnon
  • 183