Skip to content

Comment on Ask HN: How to get a phishing website that steals credentials taken down?

Comments

Safari on macOS shows a Deceptive Website Warning for the first but not the second. The second now seems to redirect (unless it discriminates based on User Agent, country or similar) to apple.com/pay.

That said, it might be worth reporting both to Apple at reportphishing@apple.com.

Thanks for the idea, will try this.

RE: Discrimination, yes it is very possible, I have ran into all sorts of server configurations, discriminating based on User Agents, Geolocation, etc. and usually they redirect you away to the real websites if you're not the "target". The second website can spawn a fake iCloud login screen.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.