Preventing Phishing

Prevent phishing on web pages

[ron351]

My site is suspended again for phishing.
It was suspended in December for the same thing.
Although <snip> my server didn't send me any proof, they deleted the website and I had to rebuild.

January I rebuilt the site again and new passwords ect were all used, and no files were chmod wrong to allow access to the outside world so there shouldnt of been any access to info that could damage the site.

Now again, the site is suspended and waiting to get it back to rebuild again.

My question, is there any way at all to help or to prevent someone from phishing your website?

I get emails all the time from Paypal and Ebay that are spoofed/phished.
Its not hard at all to hit view/source and grab a web page and alter it some and send that page out to the world and hopefully grab info from someone.

Is there a way to hide the source code entirely so it can not be copied?

I do not see why these phishers cant be stopped, email has to come from an ip address that can be tracked.
Oh well, anyway if anyone has ideas on ways to prevent a website from being phished or spoofing a webmasters website, let me know.
Ron

[edited by: trillianjedi at 10:26 am (utc) on Mar. 29, 2006]
[edit reason] Removed Specifics [/edit]

[StupidScript]

This is a little hard to understand (and welcome to the forums, ron351!).

Phishing usually means that an email has been sent with a link that looks like it goes to a reputable location, i.e. a forged email from MyBank.com with a link to BadPhisher.com that LOOKs like MyBank.com.

Are you saying that YOU are MyBank.com?

And that some phisher sent out emails supposedly from you? The emails contain links to BadPhisher.com and that site looks like your site (MyBank.com)?

It sound like Ipowerweb thinks YOU are doing the phishing, and that the pages being hosted on your account pretend to be MyBank.com, but are really your domain, BadPhisher.com.

Why do they think your a phisher?

[ron351]

Thanks for the invite.
I have no idea why <my host> suspends me.
This happened in december I rebuilt my site from nothing with tons of hours work, and here 3 months later I am suspended again.
In december I figured something was wrong, I was getting a lot of emails and wierd ones, I saved them on yahoo, but this time no indication of any trouble.

<snip>

Thats my site, and still suspended for now.

<My host> has not shown me last time or this time of any complaint or proof of phishing.
All they said was that it is suspended again and the contents will need to be deleted in case someone has cracked a password and accesses the site and put a script in one of my programs that was causing phishing.
Other then that I have no idea at all what is going on.
It baffles me to why this is happening.
I tried looking for software that may detect phishing script in my programs or find any out of the ordinary scripting in my pages, but that 1/2 day search was a waste.
A new site just posted that is combating phishing

<snip>

It looks like a super site.
Anyway, I will see if <my host> has any details or just deletes my site and has me rebuild again.

I dont know how to look in my pages or programs for security leaks or ways someone could find out how to get in.
I guess what may of happened was someone just picking on my site just uses view/source and copies my site.

I am just a webmaster posting events and such at a campground we go to and had a flash games page and that isn't a site to phish, so I see no reason why this is happening.
Thanks for your reply, I appreciate it.
Ron

[edited by: trillianjedi at 10:28 am (utc) on Mar. 29, 2006]
[edit reason] No specifics as per TOS please [/edit]