Bank Phishing Sites Show Fake ‘Suspended’ Pages to Evade Takedowns

Some bank phishing sites are displaying fake suspended pages to certain visitors as a tactic to avoid being taken down. This approach involves serving phishing content to first-time visitors, while those who revisit the site are shown a different page. Over 200 sites have been observed using this method. The goal is to evade detection and takedown efforts by making it appear as though the site is no longer active. This technique allows the phishing sites to remain operational and continue targeting new visitors.