Let me start this off by making one thing perfectly clear.  There is no such thing as an 'MS Points Generator'.  Any site/entity claiming to have a working points generator for attaining free marketplace points is lying - plain and simple. 

Please spread the word about this and protect yourself.  Never, ever use your Live ID and password to log on anywhere other than Xbox.com or your Xbox 360 console (or other official MS sites that utilize the Live ID for identification - double check the page URL before logging in). 

------------------------------------------------------------------------------------------------------
Phishing:
Phishing is the criminally fraudulent process of attempting to acquire sensitive information such as usernames, passwords and credit card details by masquerading as a trustworthy entity in an electronic communication.
------------------------------------------------------------------------------------------------------

Unfortunately, it's quick and easy for unscrupulous people out there to setup a phishing website.  All it takes to be caught by a phisher is being gullible enough and/or greedy enough to believe that signing up at one of these sites will get you something for nothing. 

There are other methods of phishing as well.  Be wary of a youtube video that's been making the rounds - supposedly showing a method for 'recovering' a Live ID from another user (i.e. A 'how to' for stealing Live accounts).  This video proposes a series of steps to follow that will not work and will only serve to provide your own Live ID and password to phishers. 

The purpose of this thread is for you, the users, to report any phishing websites you find by emailing the information to: phisherhunter@yahoo.com. 

I will take it from there and pass on the info to the appropriate people at Microsoft, so that the site can be taken down ASAP.  Please be sure to only list sites that are actually engaged in phishing.  Unfortunately, sites that merely discuss phishing and how to do it are not illegal and cannot be taken down.  Even though it may only be an inconvenience to the phishers to take down their sites (since they can always make a new site), every little bit helps.

So spread the word; nothing comes for free.  Don't fall for any of the phishing scams out there!

Now, start emailing those sites! 

---

Post provided 'as is' & confers no rights.
360 Rant Rave

<url removed>

I just had this one sent to my gamertag and thought I should tell someone. Thankfully there is a thread already for this.


EDIT: To avoid having the URLs for phishing sites listed here, the original message has been altered and an email address provided. - FM

Finally, somewhere to link all of the people. As you said to the user above, NEVER post the actual link here on the forums in a post if you find a site. Even though you say it is a phishing site some people may not read it and still get scammed.

Nice work Frag.

---

GPU-News
DC-Twitter

Woop! Nice to see a guide on what to do with phishing sites. We've been in need. Thanks!

---

..since 1901

From Microsoft Internet Explorer 7 and later

 

Select Tools

Select Phishing Filter

Select Report This Website

---

Need HDTV help?
Twitter
MW2-11.10.09

 Bird125 wrote:

From Microsoft Internet Explorer 7 and later

 

Select Tools

Select Phishing Filter

Select Report This Website

While this method does work, it works far more slowly than what I'm proposing here. 

We want the sites taken down as quickly as possible, so they snare as few users as possible.  Emailing the info to the email address above will generally get the site shut down in 1-2 days (or less). 

---

Post provided 'as is' & confers no rights.
360 Rant Rave

 Frag Monger wrote:

 Bird125 wrote:

From Microsoft Internet Explorer 7 and later

 

Select Tools

Select Phishing Filter

Select Report This Website

While this method does work, it works far more slowly than what I'm proposing here. 

We want the sites taken down as quickly as possible, so they snare as few users as possible.  Emailing the info to the email address above will generally get the site shut down in 1-2 days (or less). 

Great work Frag! Thanks

---

This post is provided "as is", and confers no rights

GamerchiX Husband
∞DNA∞

Just an update.  Thanks to the emails being sent, 6 phishing sites have been taken down since this thread went up. 

Keep reporting those sites!   

---

Post provided 'as is' & confers no rights.
360 Rant Rave

Great idea Frag. This thread should be posted in all rooms of the xbox.com forums.

---

Keep it simple.

lol Microsoft wont take the phisher down them self.  They most likely wont do anything about it at all.  Most they will do is contact the hosting company the phisher is hosted on and request them to take it down and if that phishers on off-shore hosting chances are it will be up for a while.  Phishers weather they be Xbox related or not microsoft has nothing to do with them at all nor the authority to take them down.

Plus by putting the phisher URL's up publicly isnt a good idea either.  Anyone who wants to, can obtain the direcoty information of where the logs are stored on the host and someone can just save all the password to there computer.

The best way to rid of phishers would be to just ignore them and let them die down.

---

X-Clamped Xeon Console (Llamma Method), Going strong for 3 years.
2x Toshiba-Samsung Ms28 Laser Replacements.

 xF3ARxWRAITH wrote:

lol Microsoft wont take the phisher down them self.  They most likely wont do anything about it at all.  Most they will do is contact the hosting company the phisher is hosted on and request them to take it down and if that phishers on off-shore hosting chances are it will be up for a while.  Phishers weather they be Xbox related or not microsoft has nothing to do with them at all nor the authority to take them down.

Plus by putting the phisher URL's up publicly isnt a good idea either.  Anyone who wants to, can obtain the direcoty information of where the logs are stored on the host and someone can just save all the password to there computer.

The best way to rid of phishers would be to just ignore them and let them die down.

Please, please read the entire post by Frag. There is an email addy there to report sites. No need to post any URL's. Also, there have already been sites removed thanks to this effort.

---

This post is provided "as is", and confers no rights

GamerchiX Husband
∞DNA∞

 xF3ARxWRAITH wrote:

Most they will do is contact the hosting company the phisher is hosted on and request them to take it down and if that phishers on off-shore hosting chances are it will be up for a while.  Phishers weather they be Xbox related or not microsoft has nothing to do with them at all nor the authority to take them down.

Plus by putting the phisher URL's up publicly isnt a good idea either.  Anyone who wants to, can obtain the direcoty information of where the logs are stored on the host and someone can just save all the password to there computer.

The best way to rid of phishers would be to just ignore them and let them die down.

-Before this thread went up, dozens of phishing sites were taken down - NONE were hosted in the U.S. and all were removed within 48 hours or less (usually a LOT less).  At least 15 phishing sites have now been taken down as a direct result of this thread. 

-Anyone has the 'authority' to report a phishing site to the host.  Phishing is illegal internationally, not just in the U.S. so any hosting company refusing to take down a site they have been informed is conducting illegal activity means risking legal action against their company - something most companies aren't willing to deal with over websites they host for free. 

-The URL's should not be lsited here.  Please read the first post in this thread (Any URL posted here will also be removed ASAP). 

-Ignoring phishers just allows them to multiply - and puts novice web/360 users at risk of having their accountphished.  This is a concerted effort to remove phishing sites that are found ASAP to protect users who might fall for these scams. 

---

Post provided 'as is' & confers no rights.
360 Rant Rave

Frag is the next Elliot Ness.

Keep up the good work.

---

Need HDTV help?
Twitter
MW2-11.10.09

 Frag Monger wrote:

 Bird125 wrote:

From Microsoft Internet Explorer 7 and later

 

Select Tools

Select Phishing Filter

Select Report This Website

While this method does work, it works far more slowly than what I'm proposing here. 

We want the sites taken down as quickly as possible, so they snare as few users as possible.  Emailing the info to the email address above will generally get the site shut down in 1-2 days (or less). 

I generally use the Google Anti-Phishing Tool, though I don't know how fast and effective it is. If you say this works in 1-2 days, I'll fully support it and use it on a regular basis.

Awesome.

---

BC2. Now.
Addicted to: Job for a Cowboy

[mod removed] Send an email via the address provided. Thanks!

Message sent to me by

[mod removed*]

*Please do not call out other tags on these forums

---

-One of the few, the proud, Intelligent Americans.

*The Truth Shall Set You Free*

Thanks everyone.  Keep reporting those sites (to the email address in the 1st post).  I'm taking the sites down, one-by-one.   

---

Post provided 'as is' & confers no rights.
360 Rant Rave

I got the link to this thread from KLRSKIR.

No URL... but a link to the image I uploaded to photobucket... Here.

Edit.
I received that in my email (kinda looks obvious ay )

---

Stage 1 - Purchase MW2's Prestige Edition for $198
Stage 2 - ???
Stage 3 - Profit

 bambamfn wrote:

I got the link to this thread from KLRSKIR.

No URL... but a link to the image I uploaded to photobucket... Here.

Edit.
I received that in my email (kinda looks obvious ay )

That does look odd.

---

Dapgicc.net
Developers And Publishers Gaming Industry Community Center.
Coming SOON!
The place for all Gamers...

Tagged for later use.

Nice thread hopefuly this will cutdown on phishing scams.

---

The Minion Avenging Titans Only Minion™
New GT:NewtIsApen

 bambamfn wrote:

I got the link to this thread from KLRSKIR.

No URL... but a link to the image I uploaded to photobucket... Here.

Edit.
I received that in my email (kinda looks obvious ay )

When you receive obvious phishing emails like this, I suggest you forward the message to the 'official' support department for that company (hotmail in this case), so they can take any appropriate action against the phishers to protect themselves & their users. 

---

Post provided 'as is' & confers no rights.
360 Rant Rave

 Frag Monger wrote:

 bambamfn wrote:

I got the link to this thread from KLRSKIR.

No URL... but a link to the image I uploaded to photobucket... Here.

Edit.
I received that in my email (kinda looks obvious ay )

When you receive obvious phishing emails like this, I suggest you forward the message to the 'official' support department for that company (hotmail in this case), so they can take any appropriate action against the phishers to protect themselves & their users. 

I will second this post, and also add that banking companies have been a target, and much more recently. If you get an email regarding banking info, check the companies' site. Most have a "report fraudulent email" link right on the front page. Use them 

---

This post is provided "as is", and confers no rights

GamerchiX Husband
∞DNA∞

 Frag Monger wrote:

.....

 KLRSKIR wrote:

.....

I've reported the email by following the links from the help/support links. I just wanted to bring it to the attention of other forumites, incase they were to have received the same thing, or something similar.

---

Stage 1 - Purchase MW2's Prestige Edition for $198
Stage 2 - ???
Stage 3 - Profit

My account is currently phished- how dumb am I? Anyway this might get deleted by them, but if i have you shut down the site will that hamper the investigation by MS to find and prosecute the little sh%t?

It shouldn't.  However, I wouldn't expect MS to go after every phisher themselves.  It takes too much time/resources. 

---

Post provided 'as is' & confers no rights.
360 Rant Rave

I never thought I'd have to use this site, but when I get a message to go to one of these places it just makes me angry lol... This is XBL, not my email so I no one should have to deal with this.

---

What about this site?  http://connect.microsoft.com

The person in this thread received an email and the site looks legit.  Read his post, he posts what the email says.
http://forums.xbox.com/27482198/ShowPost.aspx

Is it legit?

 RedFilter wrote:

What about this site?  http://connect.microsoft.com

The person in this thread received an email and the site looks legit.  Read his post, he posts what the email says.
http://forums.xbox.com/27482198/ShowPost.aspx

Is it legit?

The site is safe, anything with the domain of microsoft.com is a safe site to enter. However, in the post you linked to, that person's been experiencing some odd behaviour from MS Connect...it's not like them to send spontaneous e-mails.

---

BC2. Now.
Addicted to: Job for a Cowboy

 iMadCowDisease wrote:

anything with the domain of microsoft.com is a safe site to enter.

I'm sorry, but I beg to differ.

I've received emails previously with the Microsoft.com domain, but they were actually blocked by Hotmail. When I chose to view the contents of the email, the receivers email "To:" was blank, and also, just moving the mouse over the links wasn't for a Microsoft website.

---

Stage 1 - Purchase MW2's Prestige Edition for $198
Stage 2 - ???
Stage 3 - Profit

 bambamfn wrote:

 iMadCowDisease wrote:

anything with the domain of microsoft.com is a safe site to enter.

I'm sorry, but I beg to differ.

I've received emails previously with the Microsoft.com domain, but they were actually blocked by Hotmail. When I chose to view the contents of the email, the receivers email "To:" was blank, and also, just moving the mouse over the links wasn't for a Microsoft website.

Emails & websites are two different animals.  It's easy to 'fake' "@microsoft.com" on the end of an email address.  It's not nearly as easy for a website. 

As far as I can tell, the site is legit.  I traced it and it's registered to Microsoft. Support links on Microsoft.com also link directly to this page. 

---

Post provided 'as is' & confers no rights.
360 Rant Rave