{"id":179,"date":"2017-12-16T10:33:00","date_gmt":"2017-12-16T05:03:00","guid":{"rendered":"https:\/\/www.tikaj.com\/?p=179"},"modified":"2023-10-26T18:00:30","modified_gmt":"2023-10-26T12:30:30","slug":"how-to-identify-a-phishing-website","status":"publish","type":"post","link":"https:\/\/www.tikaj.com\/blog\/how-to-identify-a-phishing-website\/","title":{"rendered":"How to Identify a phishing website?"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"179\" class=\"elementor elementor-179\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-7a7d830d elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"7a7d830d\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-6c8675ca\" data-id=\"6c8675ca\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-23927958 elementor-widget elementor-widget-text-editor\" data-id=\"23927958\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.21.0 - 25-04-2024 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#69727d;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#69727d;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t\t\t<p><!-- wp:paragraph --><\/p>\n<p>Protecting yourself from harmful threats online like phishing website is a constant battle in this day and age. Security researchers and media outlets have a nearly never-ending list of topics and incidents to cover that acknowledges that we&#8217;re not safe online. <\/p>\n<p><!-- \/wp:paragraph --><\/p>\n<p><!-- wp:paragraph --><\/p>\n<p>In 2016 Q4 alone, phishing attacks have increased by a staggering 500%, claimed by a report by <a href=\"https:\/\/www.infosecurity-magazine.com\/news\/social-media-phishing-attacks-soar\/\" target=\"_blank\" rel=\"noopener\">proofpoint<\/a>.<\/p>\n<p><!-- \/wp:paragraph --><\/p>\n<p><!-- wp:paragraph --><\/p>\n<p>GreatHorn&#8217;s 2017 <a href=\"https:\/\/www.businesswire.com\/news\/home\/20170131005189\/en\/GreatHorn%E2%80%99s-2017-Spear-Phishing-Report-Shows-91\" target=\"_blank\" rel=\"noopener\">Spear Phishing Report<\/a> revealed that 91% of cooperate related phishing attacks are display name spoofs, adding that on average they receive one dangerous message per day. It is expected to be inclined in upcoming years. But with few tricks one can identify phishing websites. Here are the top tips to follow while browsing suspicious website:<\/p>\n<p><!-- \/wp:paragraph --><\/p>\n<p><!-- wp:rank-math\/howto-block {\"hasDuration\":\"\",\"days\":\"\",\"hours\":\"\",\"minutes\":\"\",\"description\":\"\",\"listStyle\":\"\",\"timeLabel\":\"\",\"textAlign\":\"left\",\"titleWrapper\":\"h3\",\"listCssClasses\":\"\",\"titleCssClasses\":\"\",\"contentCssClasses\":\"\",\"steps\":[{\"id\":\"howto-step-60692bb11ff04\",\"visible\":true,\"title\":\"Check the URL\",\"content\":\"The first step is to hover the cursor over the URL you received from mail to test the authenticity of your web address.\\u00a0\\u003cbr\\\/\\u003e\\u003cbr\\\/\\u003eYou can look for a padlock symbol in the address bar to verify that the URL begins with \\u0022 https:\\\/\\u0022 or ' http:\\\/.\\u00a0 The only difference is that \\u0022https:\\\/\\u0022 means that the web address has been encrypted and protected with an SSL certificate. \\u003cbr\\\/\\u003e\\u003cbr\\\/\\u003e\\u003cstrong\\u003eYou should also give attention to:\\u003c\\\/strong\\u003e\\u003cbr\\\/\\u003e- The base domain of the website\\u003cbr\\\/\\u003e- The full URL of the website\\u003cbr\\\/\\u003e- The website registration details (web site owner \\u0026amp; date registered)\"},{\"id\":\"howto-step-60692bb11ff08\",\"visible\":true,\"title\":\"Analyse Website Content\",\"content\":\"When attacker is trying to forge an official website, there are certain things it would miss like:\\u003cbr\\\/\\u003e- The site will look little offset\\u003cbr\\\/\\u003e- Spelling Mistakes\\u003cbr\\\/\\u003e- Grammatical \\u003cbr\\\/\\u003e- Low resolution images\\u003cbr\\\/\\u003e\\u003cbr\\\/\\u003eIn an official website feel is very standard, sites is made with details in mind on the other side phishing website will miss some of the factors. This gives a big red flag that it is a phishing website.\"},{\"id\":\"howto-step-60692bb11ff09\",\"visible\":true,\"title\":\"Payment Methods\",\"content\":\"An official website will always accept online transactions via different platforms and certain debit cards are accepted. If the mode of payment is only via bank without any more details it should be flagged as it might be a phishing website.\"},{\"id\":\"howto-step-60692bb11ff0a\",\"visible\":true,\"title\":\"Research\",\"content\":\"If anyone is feeling suspicious about any website , they should start with looking at the website directly. Also consider looking at the website\\u2019s WHOIS information. It lets you check who is the owner of the website and other valuable details which can help you distinguish between an official and phishing website.\"},{\"id\":\"howto-step-60692bb11ff0b\",\"visible\":true,\"title\":\"Contact Us Page\",\"content\":\"Contact us page is very essential for any service. In an official website contact us page will contain ample amount of information like postal address, contact number, helpdesk or contact email address and social media channels. If none of them are present, the site can be phishing and should be treated as highly suspicious. \"}],\"className\":\"\"} --><\/p>\n<div class=\"wp-block-rank-math-howto-block\">\n<div class=\"rank-math-howto-step\">\n<h3 class=\"rank-math-howto-title\">Check the URL<\/h3>\n<div class=\"rank-math-howto-content\">The first step is to hover the cursor over the URL you received from mail to test the authenticity of your web address.&nbsp;<br><br>You can look for a padlock symbol in the address bar to verify that the URL begins with &#8221; https:\/&#8221; or &#8216; http:\/.&nbsp; The only difference is that &#8220;https:\/&#8221; means that the web address has been encrypted and protected with an SSL certificate. <br><br><strong>You should also give attention to:<\/strong><br>&#8211; The base domain of the website<br>&#8211; The full URL of the website<br>&#8211; The website registration details (web site owner &amp; date registered)<\/div>\n<\/div>\n<div class=\"rank-math-howto-step\">\n<h3 class=\"rank-math-howto-title\">Analyse Website Content<\/h3>\n<div class=\"rank-math-howto-content\">When attacker is trying to forge an official website, there are certain things it would miss like:<br>&#8211; The site will look little offset<br>&#8211; Spelling Mistakes<br>&#8211; Grammatical <br>&#8211; Low resolution images<br><br>In an official website feel is very standard, sites is made with details in mind on the other side phishing website will miss some of the factors. This gives a big red flag that it is a phishing website.<\/div>\n<\/div>\n<div class=\"rank-math-howto-step\">\n<h3 class=\"rank-math-howto-title\">Payment Methods<\/h3>\n<div class=\"rank-math-howto-content\">An official website will always accept online transactions via different platforms and certain debit cards are accepted. If the mode of payment is only via bank without any more details it should be flagged as it might be a phishing website.<\/div>\n<\/div>\n<div class=\"rank-math-howto-step\">\n<h3 class=\"rank-math-howto-title\">Research<\/h3>\n<div class=\"rank-math-howto-content\">If anyone is feeling suspicious about any website , they should start with looking at the website directly. Also consider looking at the website\u2019s WHOIS information. It lets you check who is the owner of the website and other valuable details which can help you distinguish between an official and phishing website.<\/div>\n<\/div>\n<div class=\"rank-math-howto-step\">\n<h3 class=\"rank-math-howto-title\">Contact Us Page<\/h3>\n<div class=\"rank-math-howto-content\">Contact us page is very essential for any service. In an official website contact us page will contain ample amount of information like postal address, contact number, helpdesk or contact email address and social media channels. If none of them are present, the site can be phishing and should be treated as highly suspicious. <\/div>\n<\/div>\n<\/div>\n<p><!-- \/wp:rank-math\/howto-block --><\/p>\n<p><!-- wp:heading --><\/p>\n<h2>Short Case Study<\/h2>\n<p><!-- \/wp:heading --><\/p>\n<p><!-- wp:paragraph --><\/p>\n<p>Below is a snapshot of a phishing page targeting Metrobank of philippines. It\u2019s received by their customers for updating their password. If looked carefully the following things can be seen clearly:<\/p>\n<p><!-- \/wp:paragraph --><\/p>\n<p><!-- wp:list --><\/p>\n<ul>\n<li>Page is hosted on <strong>http<\/strong> and not <strong>https.<\/strong><\/li>\n<li>URL seems legit.<\/li>\n<li>Page looks a little offset.<\/li>\n<\/ul>\n<p><!-- \/wp:list --><\/p>\n<p><!-- wp:image --><\/p>\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh5.googleusercontent.com\/8t5Bx205hZxSkUphX0pCN5vjVYT3qdCuJXcgehEdDfS3pCLfjIGEzXVI9YMKDUl1VZ9brb_UMk-IsRhMcS92yPEEavWS2MQEtGH8jx4rCWBMUkMroFKuLr6bDZtWhbQ1LvA0_5k\" alt=\"\"><\/figure>\n<p><!-- \/wp:image --><\/p>\n<p><!-- wp:paragraph --><\/p>\n<p><strong>When analyzed further:<\/strong><\/p>\n<p><!-- \/wp:paragraph --><\/p>\n<p><!-- wp:list --><\/p>\n<ul>\n<li>It had no home page,no contact information page.<\/li>\n<li>This was the only page hosted on the domain.<\/li>\n<li>The links on the phishing page are disabled.<\/li>\n<\/ul>\n<p><!-- \/wp:list --><\/p>\n<p><!-- wp:paragraph --><\/p>\n<p>These types are cases are very much common and it is tough to tackle this problem without a proper strategic plan. Use TIKAJ\u2019s <a href=\"https:\/\/www.tikaj.com\/services\/anti-phishing\/\">Anti-Phishing services<\/a>&nbsp;to intercept and minimize phishing problem in your environment.<\/p>\n<p><!-- \/wp:paragraph --><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Protecting yourself from harmful threats online like phishing website is a constant battle in this day and age. Security researchers and media [&hellip;]<\/p>\n","protected":false},"author":8,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_eb_attr":"","footnotes":""},"categories":[13],"tags":[],"_links":{"self":[{"href":"https:\/\/www.tikaj.com\/wp-json\/wp\/v2\/posts\/179"}],"collection":[{"href":"https:\/\/www.tikaj.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.tikaj.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.tikaj.com\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/www.tikaj.com\/wp-json\/wp\/v2\/comments?post=179"}],"version-history":[{"count":6,"href":"https:\/\/www.tikaj.com\/wp-json\/wp\/v2\/posts\/179\/revisions"}],"predecessor-version":[{"id":8898,"href":"https:\/\/www.tikaj.com\/wp-json\/wp\/v2\/posts\/179\/revisions\/8898"}],"wp:attachment":[{"href":"https:\/\/www.tikaj.com\/wp-json\/wp\/v2\/media?parent=179"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.tikaj.com\/wp-json\/wp\/v2\/categories?post=179"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.tikaj.com\/wp-json\/wp\/v2\/tags?post=179"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}