How do I report a phishing website?
Hi,
So awhile back, I was targeted by a very sophisticated phishing/fishing attack. The attacker was trying to get me to go to two sites. The attacker had my name and other personal info and claimed to be from Apple legal and wanted me to sign in to review a request they received. The sites were good clones.
{Edited Website Link} (in a text message sent, the “i” was capitalized, making it look like Apple.
{Edited Website Link}
The sites look innocuous now, but after they get your IP address, I think they whitelist the site to show a fake Apple login. They will eventually try to get your 2fa.
The attack was very targeted. A lot of research went into who I am.
Other interesting bits is they were capable of opening an Apple support ticket and having it sent to my email. I called Apple support and the representative saw the ticket and said it was a real support case, but was unsure how it was opened. The attacker used that to make it seem like he really was from Apple.
I’ve no idea how to best report this. I have tried reporting to Google and Microsoft phishing, but the sites aren’t being blocked. Any ideas?
[Re-Titled by Moderator]