Our real web site is www.abc.com. Recently Intel notified us of another web site www.fake.com having some parts of the site appearing the same as our real site. This is obviously a phishing site.

Not much damage has been done and I don't think our users are stupid enough to recognize www.fake.com as our real site and try to access it. However, I would like to know what are the mitigation measures we could take.

I reckon sending our users an email or a company circular to warn them that we have only one real site is a must. What else can we do to prevent?

  • 2
    This is more a legal issue than a security one. The best way to prevent the phishing of login credentials is by using U2F Commented Dec 18, 2015 at 0:50
  • Blocking the fake domain and its IP address on the corporate proxy/network would be a start, and for a legal solution I guess you could claim copyright infringement since the fake site copies your real one. Commented Dec 18, 2015 at 1:29
  • 5
    contact the hosting company and report the site
    – schroeder
    Commented Dec 18, 2015 at 2:42
  • @NeilMcGuigan - Do you feel that any 2FA would be sufficient or that U2F provides better security than other 2FA solutions? Commented Dec 18, 2015 at 4:01
  • 3
    Thanks for the info @NeilMcGuigan. U2F does seem better at preventing phishing than other 2FA. I found this helpful too developers.yubico.com/U2F/Protocol_details/Overview.html Commented Dec 18, 2015 at 5:46

1 Answer 1


I know that RSA offers services that will, among other things, take down phishing sites. More information can be found here.

I have experience with them and I must say, whenever we request a take down on a phishing site, their response is quite fast.

Unfortunately, I have no idea regarding costs etc.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .