> Are you kidding me? I'm supposed to report stuff like this to the police, who then are supposed to send a take-down notice, every time a user of mine is affec

> Are you kidding me? I'm supposed to report stuff like this to the police, who then are supposed to send a take-down notice, every time a user of mine is affected by something like this? Yes, reporting malicious activity to police is the right thing to do. > Same with phishing sites - it doesn't take a genius to look at a "Bank of America" site and see that it's not, in fact, the real BoA, just like it doesn't take a genius to know that a "Flash Update" site isn't. What you think to be a non-genius is nonetheless genius to someone who doesn't understand how web sites work and what to look for.