North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Yahoo-hosted phishing sites

  • From: Jon R. Kibler
  • Date: Wed Mar 29 11:57:28 2006

MARLON BORBA wrote:
> 
> Did you tried the form to report "Phishing Sites on Yahoo"?
> 
> http://add.yahoo.com/fast/help/us/domains/cgi_phishing
> 

Yeah, tried that too. Get back a message saying that they are not yahoo servers. 

For example, just yesterday had a couple of phish quarantined by ClamAV that were using http://rds.yahoo.com/{whatever} as the URL. (It may have been a redirect, but there was no other URL embedded into the message -- nor was there unicode or anything similar.) The hostname rds.yahoo.com is an alias for rds.yahoo7.akadns.net, and that appears to be why yahoo's automated response disclaims it. 

If you try to send to [email protected], their mail server rejects it saying that the mail is an illegal relay attempt.

Jon
-- 
Jon R. Kibler
Chief Technical Officer
A.S.E.T., Inc.
Charleston, SC  USA
(843) 849-8214




==================================================
Filtered by: TRUSTEM.COM's Email Filtering Service
http://www.trustem.com/
No Spam. No Viruses. Just Good Clean Email.