Thanks James, that would work for older domains. I was able to find the original site right away. But the phishing sites only went up in the last couple of days and haven't been indexed by Google yet. They have DNS records though. I think I'm going to need something that can query DNS servers or registrars.
I did learn a new trick though. Thanks. Back to the drawing board I guess. Bill From: James Rankin [mailto:[email protected]] Sent: Friday, December 12, 2008 1:51 AM To: NT System Admin Issues Subject: Re: locating phish domains Can't you just use Google? Google supports use of the syntax inurl:joesfinancial - it may support wildcards 2008/12/11 Bill Songstad (WCUL) <[email protected]> Does anyone know of a tool or website that allows you to submit a search for domains with wildcards. I have a colleague that has some phishing sites popping up using related domain names. I was hoping to do some DNS queries to try and spot some other potential phish sites. Does anyone know a way to search for all active domains containing a particular string like *joesfinancial*.com? Thanks for any insight Bill ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
