Post
Topic
Board Services
Merits 1 from 1 user
Re: [OPEN] eXch Anti-Phishing Campaign
by
xOrpian
on 26/03/2025, 18:52:21 UTC
⭐ Merited by eXch Support (1)
SCPT is the registrar. Check properly.

https://www.eurodns.com/whois-search/cd-domain-name

Also, hosting providers do effectively take down scam domains sometimes. Your logic about them choosing a new host to continue their dirty work is accurate, but they could just as well choose a new registrar, hosting provider with that backup. Think!

My reply was not for 'SCPT', but specifically for hosts.

I don't know about hosting providers having the right to suspend a domain with the same losses as the domain owner. AFAIK, the host can disable access to the domain to the account it's associated with.
When it comes to registrars suspending a domain, it leads to permanent suspension, and without appeal, you have no chance of getting the domain back. (But after hosting a phishing website on the domain, would you dare make the appeal?)

There's a reason Exch support made it specific to report to registrars, and not hosts.

Can the phishing use other domains and hosts (Yes)? But would it have the same popularity as the ones that are already live (I think not)? In time, another domain might become popular, that's phishing exch, but the previous ones whose domains have been permanently suspended (by registrars), not hosts. In other words, links of these suspended domains will cease to function (Popularity is an overstatement here, there are other means a domain can become popular, not just in SE, or Articles on websites phisher controls, too).

This can be another reason I can think exch support making this statement when adding new domains to this thread.
It is obvious that our team will analyze the domains that are reported to us, so creating new ones in order to abuse the rewards will not be possible. We only consider to add new domains when they're older than 6 months.

They know what they are doing, including the potential ways this bounty can be abused.