Yahoo-hosted phishing sites

Did you tried the form to report "Phishing Sites on Yahoo"?

http://add.yahoo.com/fast/help/us/domains/cgi_phishing

Abra�os,
Marlon Borba, CISSP.

MARLON BORBA wrote:

Did you tried the form to report "Phishing Sites on Yahoo"?

http://add.yahoo.com/fast/help/us/domains/cgi_phishing

Yeah, tried that too. Get back a message saying that they are not yahoo servers.

For example, just yesterday had a couple of phish quarantined by ClamAV that were using http://rds.yahoo.com/\{whatever\} as the URL. (It may have been a redirect, but there was no other URL embedded into the message -- nor was there unicode or anything similar.) The hostname rds.yahoo.com is an alias for rds.yahoo7.akadns.net, and that appears to be why yahoo's automated response disclaims it.

If you try to send to anything@akadns.net, their mail server rejects it saying that the mail is an illegal relay attempt.

Jon