Hi all,
Some months back, I had someone try to sign up for hosting with the domain "cgi17-ebay.com". A few other factors did not add up (such as, no payment was made and they did not respond to emails asking if they wanted to make payment and continue with setup), but even so, this really really looked like a domain that someone would have tried to use in a phishing scam. It was just too obvious. (To make matters sillier, they wanted us to register it.) We did not process the account signup, though we did wait for 72 hours before completely voiding the order.
My question is: should suspected phishing signup attempts be reported to someone, and if so, whom? Where would you draw a line at "looks obviously suspicious"? Would it have to be something like the ebay knockoff attempted above?
Some months back, I had someone try to sign up for hosting with the domain "cgi17-ebay.com". A few other factors did not add up (such as, no payment was made and they did not respond to emails asking if they wanted to make payment and continue with setup), but even so, this really really looked like a domain that someone would have tried to use in a phishing scam. It was just too obvious. (To make matters sillier, they wanted us to register it.) We did not process the account signup, though we did wait for 72 hours before completely voiding the order.
My question is: should suspected phishing signup attempts be reported to someone, and if so, whom? Where would you draw a line at "looks obviously suspicious"? Would it have to be something like the ebay knockoff attempted above?