Today while searching for a UK Bank Google offered me an advert.
The advert looks very unclear and I expect most “normal” people searching will click on it thinking it is the genuine website.
Note: The top “Ad” entry is the phishing link!
So… is Google dumb enough to allow this? It seems so!
You click on it.. spot the difference.
vs
Google are allowing a phishing site to advertise on keywords for a UK bank!
To make identification of this site more difficult it seems that if you visit the site without Google as the referer you get either a 404.. or a website that looks like it is for an accountancy practice.
Poor show.. time to report the advert to Google.
However it looks like it isn’t the first time. I can find similar names that have likely had the same scam
hsbcsaving.info – HSBC Bank phishing site
tsbinternet.info – UK Bank; TSB phishing site
tsbinternetsavings.org – UK Bank; TSB phishing site
tsbinternetaccounts.org – UK Bank; TSB phishing site
cbonline.live – Clydesdale Bank phishing site
cbonllne.group – Clydesdale Bank phishing site
cbonlive.group – Clydesdale Bank phishing site
cbonline.online – Clydesdale Bank phishing site
clydesdaleco.xyz – Clydesdale Bank phishing site
cbinternetacc.site – Clydesdale Bank phishing site
cbinternetaccountants.xyz – Clydesdale Bank phishing site
cbonlineaccount.info – Clydesdale Bank phishing site
cbolines.online – Clydesdale Bank phishing site
chasesavingsacc.com – US bank “Chase” phishing site
cbonlinesaver.info – Clydesdale Bank phishing site
cbonlinesaveracc.info – Clydesdale Bank phishing site
cbinternetacc.xyz – Clydesdale Bank phishing site
ntwestm.info – UK Bank NatWest phishing site
personalnatwst.info – UK Bank NatWest phishing site
ylbonline.ltd – Yorkshire Bank phishing site
ybonlline.com – Yorkshire Bank phishing site
ybonlinesavings.xyz – Yorkshire Bank phishing site
ybonllne.systems – Yorkshire Bank phishing site
ylbonline.systems – Yorkshire Bank phishing site
yrkbonline.xyz – Unknown
ysbonline.info – Unknown
ysbonline.info – Unknown
mbinternetaccountant.org – Metro Bank phishing site
mbinternetaccountants.org – Metro Bank phishing site
mbonlinesavings.info – Metro Bank phishing site
mbinternetsaver.com – Metro Bank phishing site
mbinternetaccs.info – Metro Bank phishing site
metrobankinternt.info – Metro Bank phishing site
metrobankinternet.com – Metro Bank phishing site
mbinternetsavings.com – Metro Bank phishing site
mbsavingsacc.info – Metro Bank phishing site
mbonlinehome.info – Metro Bank phishing site
mbinternetsaving.com – Metro Bank phishing site
mbinternt.info – Metro Bank phishing site
mbiinternet.org – Metro Bank phishing site
mbinternetaccount.xyz – Metro Bank phishing site
mtrbonline.info – Metro Bank phishing site
metrbonline.info – Metro Bank phishing site
rbspersonal.xyz – Royal Bank of Scotland phishing site
postoffc.com – UK Bank Post Office phishing site
pstofficeacc.xyz – UK Bank Post Office phishing site
pstoffcsavingsacc.info – UK Bank Post Office phishing site
Most are hosted at “45.76.210.134” (45.76.210.134.vultr.com).
thecomputerperson 