Did “miowpurr” really verify 221042 phishes? That’s one every 32 seconds for a working year. Are they being paid?

We now generate a report every three hours showing major domains currently exploited by phishing attacks:

http://www.sitetruth.com/reports/phishes.html

This is based on PhishTank, DMOZ, and SiteTruth data. There are only 169 major domains (ones notable enough to be in the Open Directory, which has 1.6 million domains) hosting or redirecting to active phishes. So solving this problem is within reach. Most of the problem sites are either ISPs or have an open redirector; a few are clearly break-in situations.

We’re seeing some problems with old phishes not being removed from PhishTank. If you click on the “PhishTank Example” button for each entry in our list, you’ll see a PhishTank entry marked “valid and online”. But if you follow the link to the actual page, most of the time, the page will no longer be available. And, almost always, PhishTank will report “No Screenshot Yet”, even for entries that are months old.

Security issues with unpatched computers is likely one of the causes. The Society is
noticing more and more mail and ftp servers becoming compromised, especially in the
last six months or so. These scum won’t stop, and we shouldn’t either! Let’s keep the
heat on the phishes until they’re well done and ready for eating.

MM of the London Antiphishing Society (near Arkansas Nuclear One)
now in Little Rock.