Yahoo-hosted phishing sites

Wed Mar 29 16:56:17 UTC 2006

MARLON BORBA wrote:
> 
> Did you tried the form to report "Phishing Sites on Yahoo"?
> 
> http://add.yahoo.com/fast/help/us/domains/cgi_phishing
> 

Yeah, tried that too. Get back a message saying that they are not yahoo servers. 

For example, just yesterday had a couple of phish quarantined by ClamAV that were using http://rds.yahoo.com/{whatever} as the URL. (It may have been a redirect, but there was no other URL embedded into the message -- nor was there unicode or anything similar.) The hostname rds.yahoo.com is an alias for rds.yahoo7.akadns.net, and that appears to be why yahoo's automated response disclaims it. 

If you try to send to anything at akadns.net, their mail server rejects it saying that the mail is an illegal relay attempt.

Jon
-- 
Jon R. Kibler
Chief Technical Officer
A.S.E.T., Inc.
Charleston, SC  USA
(843) 849-8214

==================================================
Filtered by: TRUSTEM.COM's Email Filtering Service
http://www.trustem.com/
No Spam. No Viruses. Just Good Clean Email.