<story><title>Submit Your Claim in the Equifax Breach Settlement</title><url>https://www.equifaxbreachsettlement.com/</url></story><parent_chain><item><author>simonsarris</author><text>It would become a legendary case study if this site turned out to be an information phishing site. (This one is legit but I expect it to happen someday. I&amp;#x27;m surprised it hasn&amp;#x27;t already.)&lt;p&gt;After all this site links to the law firm JND, but nowhere does JND mention &lt;i&gt;this&lt;/i&gt; site. So any of us could have made this site.&lt;p&gt;&lt;i&gt;Use the form below to find out if your information was impacted and if you are a class member.&lt;/i&gt;&lt;p&gt;&lt;i&gt;Last Name&lt;/i&gt; _______&lt;p&gt;&lt;i&gt;Last 6 Digits of Social Security Number&lt;/i&gt; ________</text></item></parent_chain><comment><author>Zombieball</author><text>A security researcher setup a similar domain with a phishing page. Equifax made the mistake of linking to his page rather than their own on twitter!!!&lt;p&gt;&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;www.google.ca&amp;#x2F;amp&amp;#x2F;s&amp;#x2F;www.nytimes.com&amp;#x2F;2017&amp;#x2F;09&amp;#x2F;20&amp;#x2F;business&amp;#x2F;equifax-fake-website.amp.html&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;www.google.ca&amp;#x2F;amp&amp;#x2F;s&amp;#x2F;www.nytimes.com&amp;#x2F;2017&amp;#x2F;09&amp;#x2F;20&amp;#x2F;busin...&lt;/a&gt;</text></comment>
<story><title>Submit Your Claim in the Equifax Breach Settlement</title><url>https://www.equifaxbreachsettlement.com/</url></story><parent_chain><item><author>simonsarris</author><text>It would become a legendary case study if this site turned out to be an information phishing site. (This one is legit but I expect it to happen someday. I&amp;#x27;m surprised it hasn&amp;#x27;t already.)&lt;p&gt;After all this site links to the law firm JND, but nowhere does JND mention &lt;i&gt;this&lt;/i&gt; site. So any of us could have made this site.&lt;p&gt;&lt;i&gt;Use the form below to find out if your information was impacted and if you are a class member.&lt;/i&gt;&lt;p&gt;&lt;i&gt;Last Name&lt;/i&gt; _______&lt;p&gt;&lt;i&gt;Last 6 Digits of Social Security Number&lt;/i&gt; ________</text></item></parent_chain><comment><author>astura</author><text>Its somewhat of an unsolved problem, there&amp;#x27;s all sorts of these kind of sites that are legitimate but look really suspicious, like they could be phishing sites. Examples:&lt;p&gt;&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;www.annualcreditreport.com&amp;#x2F;&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;www.annualcreditreport.com&amp;#x2F;&lt;/a&gt;&lt;p&gt;&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;www.optoutprescreen.com&amp;#x2F;&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;www.optoutprescreen.com&amp;#x2F;&lt;/a&gt;&lt;p&gt;You can tell these two are legit because they are listed on official government sites:&lt;p&gt;&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;www.ftc.gov&amp;#x2F;faq&amp;#x2F;consumer-protection&amp;#x2F;get-my-free-credit-report&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;www.ftc.gov&amp;#x2F;faq&amp;#x2F;consumer-protection&amp;#x2F;get-my-free-cred...&lt;/a&gt;&lt;p&gt;&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;www.consumer.ftc.gov&amp;#x2F;articles&amp;#x2F;0262-stopping-unsolicited-mail-phone-calls-and-email&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;www.consumer.ftc.gov&amp;#x2F;articles&amp;#x2F;0262-stopping-unsolici...&lt;/a&gt;&lt;p&gt;However, I can see how some people wouldn&amp;#x27;t think to go through .gov sites and there&amp;#x27;s really nothing stopping me from registering a phishing site with a similar domain and hosting it in Russia or something to confuse people into using mine rather than the official one.&lt;p&gt;I think freecreditscore.com has been confused with annualcreditreport.com in the past. Freecreditscore.com is owned by Experian now and it actually does offer a real free no strings attached credit score NOW, but in the past it used to be one of those sites that tricked you into signing up for a subscription.&lt;p&gt;Then, of course, there was the Equifax data breach site that totally looked like a phishing site.</text></comment>