How to Report Phishing?

Claude AlmansiBy Claude Almansi
Editor, Accessibility Issues

On Dec 8, 2010, I received the following e-mail, entitled “Alert!”, at my gmail address, apparently from “GMAIL <onlineupdatealert@gmail.com>”:

Dear Email Client,

There was a failed attempt to login into your account from a blacklisted IP. Kindly login below
http://www.gmail.com

It looked suspiciously phishy so I checked the source – click here to see the source.

The full header indicates that the sender might be spoofed, the chunk of code suggests a web bug that verifies that the message has been viewed, hence that the receiver’s address is valid and spammable, and the last two lines show that what appears to be the URL of the legit gmail login page actually links to a well-made duplicate: http://www.4dsystems.com.au/flashimg/gmail/signon.html. Continue reading