Large Swedish bank blocked for phishing?

Comments

4 comments

  • Avatar
    rotblitz

    "I just want someone to confirm that OpenDNS is actually blocking swedbank.se so it's not just me."

    Yes, confirmed, the domain www.swedbank.se is blocked as phishing by OpenDNS.

    nslookup www.swedbank.se.
    Server:  UnKnown
    Address:  192.168.2.11

    Nicht autorisierte Antwort:
    Name:    www.swedbank.se
    Address:  67.215.65.133

    This returned 67.215.65.133 is hit-phish.opendns.com.

    No idea why it came to this, because it was rejected as phish at PhishTank:
    https://www.phishtank.com/phish_detail.php?phish_id=210952

    You may want to open a support ticket to get this corrected.

    0
    Comment actions Permalink
  • Avatar
    rotblitz

    It seems PhishTank user perf doesn't like this bank...
    https://www.phishtank.com/user_submissions.php?username=perf

    0
    Comment actions Permalink
  • Avatar
    jiiimbooh

    Thank you. I already clicked on the link "Think this site is not phishing? Tell us why and we'll review." I'm sure lots of other Swedes will/have done the same.

    0
    Comment actions Permalink
  • Avatar
    Brian Hartvigsen

    The user who submitted the website had nothing to do with the overall listing.  PhishTank works on a weighted voting system, so a user like perf who has never been seen before has no weight and no ability to automatically list something as Phishing.  They simply submit a domain, and it is up to the community to decide if the domain is phishing or not.  In this case, the community voted that the initial submission by perf was not phishing, however a secondary listing (due to an HTTP redirect) was inadvertently listed as phishing.  This has been corrected.

    swedbank.se was blocked by OpenDNS for just under 24 hours due to multiple listings from both PhishTank and other partners.

    0
    Comment actions Permalink

Please sign in to leave a comment.