Phishing attacks reported by users
When a phishing attack is reported, the links in the email should not be clicked using your normal browser to prevent malware downloads. These may be automatic downloads.
If you need to open the link, use a separate browser like Opera or Firefox, in Private Browser mode.
1) Create/Update a TextBlaze Snippet for the phishing emails, and share it in Helpdesk Chat
There is a 'Phishing' folder in TextBlaze to save it in
2) Report the phishing URL to their registrar
Utilize the ICANN site to identify the Domain Registrar: https://lookup.icann.org/en
Enter the base domain, without any pretext (https, www.) and no slash or slugs after the Top Level Domain (.com, .org, .site).
Locate the Registrar Information, either a website or email address for abuse reporting:
If it's a website, find a Report Abuse or Contact Us page, and look for options to report Phishing:
3) Report the unsafe URL to Google Safe Browsing
https://safebrowsing.google.com/safebrowsing/report_phish/
4) Notify SysOps of the phishing attempt
Post in "Support <> Dev T4" chat, letting them know the phishing attempt has come in, and that you've reported it to the Domain Registrar as well as to Google Safe Browsing