Top all-time · #2554
AI-powered Cybercrime Defense by Netcraft
Company blog · netcraft.com/blogsecuritydata
AI-powered Cybercrime Defense by Netcraft is the company blog at netcraft.com, writing about security and data. Since 2008, 30 different Hacker News readers have linked it 36 times, most often “ChatGPT creates phisher's paradise by recommending the wrong URLs for banks”. No feed was found, so read it on the site itself.
Too few sampled comments (22) to say how often HN recommends it.?
Why HN links it
HN readers cite Netcraft's blog and web server surveys for statistics on web server market share, SSL certificates and hosting. Commenters use its figures as sources rather than praising the writing.
Summarised by Claude from a sample of 22 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Protect your brand with Netcraft's digital risk protection platform. We detect, disrupt and remove phishing, scams and cyber attacks with unmatched scale and effectiveness.
Most-linked posts?
- ChatGPT creates phisher's paradise by recommending the wrong URLs for banks2 people · 2 mentions · first linked 2025-07-03
- /2 people · 2 mentions · first linked 2008-05-28
- /internet-data-mining/ssl-survey/2 people · 2 mentions · first linked 2016-03-08
- /active-sites/2 people · 2 mentions · first linked 2013-05-02
What Hacker News says?
> https://www.netcraft.com/images/2015/11/certauth_all.png (January 2015)
Comment linking /images/2015/11/certauth_all.png
on “Let's Encrypt Has Issued a Billion Certificates”Submitted Cloudflare loses 22% of its domains in Freenom .tk shutdown as a story · 310 points
HN discussion> About a fifth to a quarter of public-facing Web servers are Windows Server Got a link for that? Best I can find is 5% of all websites: https://www.netcraft.com/blog/may-2023-web-server-survey/
Comment linking /blog/may-2023-web-server-survey/
on “The New York Times is suing OpenAI and Microsoft for copyright infringement”Submitted ChatGPT creates phisher's paradise by recommending the wrong URLs for banks as a story · 6 points
HN discussionIt looks [1] like some CAs depend heavily on DV certs (GoDaddy) while others do not (Digicert). [1] http://www.netcraft.com/internet-data-mining/ssl-survey/
Comment linking /internet-data-mining/ssl-survey/
on “Let's Encrypt has issued its first million certificates”Submitted .si domain registrations outpace .ai after Trump's 'Super Intelligence' rename as a story · 5 points
HN discussionThe study they link to: https://www.netcraft.com/blog/large-language-models-are-fall... It seems they are selling some product to protect against this. So, I could believe the headline here, but less confident that this is an unbiased look at the problem.
Comment linking /blog/large-language-models-are-falling-for-phishing-scams
on “ChatGPT creates phisher's paradise by serving the wrong URLs for major companies”Submitted Flipping the script on pig butchering scams – $45M is just the tip as a story · 4 points
HN discussionEven same idea as http://netcraft.com
Comment linking /
on “What technologies are under your site”Submitted UN? FBI? World Bank? Deepfake police chief used for compensation scam video as a story · 4 points
HN discussionSorry, that was poorly presented on my part. I believe the most recent estimate was around 2-3% of all internet traffic was served on a web server being hosted by Amazon. I can’t find the original source, but this Quora post[0] and included primary source[1] suggest the same. [0] https://www.quora.com/What-is-the-estimated-percent-of-inter... [1] https://www.netcraft.com/internet-data-mining/million-busies...
Comment linking /internet-data-mining/million-busiest-websites/
on “What's Amazon's market share? 35% or 5%?”Submitted .hey .human: .let .the .official .agent .race .for .the .future .internet .get as a story · 3 points
HN discussionIt's still a drop in the ocean, heard of that KISS-CAM CEO that got busted for cheating? His company literally seems to be built on selling hosted Apache Airflow services and just took in a series D round of 93 MUSD. Apache HTTPD still seems to run about 17% of all sites, plenty of those probably make money using the software. https://www.netcraft.com/blog/january-2025-web-server-survey Open source is open, so natur…
Comment linking /blog/january-2025-web-server-survey
on “Apache HTTP Server: 'RewriteCond expr' always evaluates to true”Submitted Pre-DMA alternative iOS app stores are already riddled with malware as a story · 3 points
HN discussion> These days, nginx has more market share than apache Maybe not by much though. https://www.netcraft.com/blog/december-2023-web-server-surve...
Comment linking /blog/december-2023-web-server-survey/
on “Web CGI programs aren't particularly slow these days”Submitted Recruitment Scams on the Rise: How Threat Actors Exploit Job Seekers as a story · 2 points
HN discussionHN replies sometimes (often) include statements unsupported by evidence For example, something like "90% of websites are behind Cloudflare" There is no evidence to support this statement https://www.netcraft.com/blog/may-2025-web-server-survey Further, being "behind Cloudflare" does not necessarily mean a User-Agent header is required For example, https://www.cloudflare.com does not require a UA header https://examp…
Comment linking /blog/may-2025-web-server-survey
on “Since Chronium 148, Math.tanh is now fingerprintable to link underlying OS”Submitted Black Friday Fake Stores Spike 110% by Using LLMs This Holiday Shopping Season as a story · 1 points
HN discussionDoes anyone know where the 100MM number comes from? According to Netcraft [1], there were over 600MM active sites [2] last month. [1] http://news.netcraft.com/archives/2013/04/02/april-2013-web-... [2] http://www.netcraft.com/active-sites/
Comment linking /active-sites/
on “Planning for Another 100 Million Web Sites”Submitted 'darcula' iMessage and RCS smishing attacks target global postal services as a story · 1 points
HN discussionYes: http://www.netcraft.com/wp-content/uploads/2010/05/certauth_... And thanks!
Comment linking /wp-content/uploads/2010/05/certauth_all4.png
on “How Symantec upsells Internet Explorer 5 SSL support in 2015”Submitted "Quishing" You a Happy Holiday Season as a story · 1 points
HN discussionnginx gained on 'active sites' and the 'top million sites' metrics. They have an interesting way of determining active sites: http://www.netcraft.com/active-sites/
Comment linking /active-sites/
on “April 2014 Web Server Survey”Submitted Uncloaking Fake Search Ads that display a legitimate URL on the search engine as a story · 1 points
HN discussionIf you're looking for aggregate statistics, etc, Netcraft has been doing this for a while: http://www.netcraft.com/
Comment linking /
on “Search Engine for Hackers”Submitted Impact of Freenom halting registrations on cybercrime as a story · 1 points
HN discussionThere is some precedent for similar situations, where entities like domain registrars are named/shamed for not trying to filter shady looking stuff. Personally, I don't see how it makes sense for a domain registrar, CA, web hosting provider, etc, to have to figure this out, but... - Legitscript, some kind of consortium meant to block internet sales of pharma products named/shamed a domain registrar https://www.legit…
Comment linking /anti-phishing/deceptive-domain-score/
on “14,766 Let's Encrypt SSL Certificates Issued to PayPal Phishing Sites”Submitted NetCraft as a story · 1 points
HN discussionNetcraft have a somewhat vague article on their methodology on their site eg. >By arranging for a number of IP addresses to send packets to us near simultaneously, low level TCP/IP characteristics can be used to work out, within an error margin, if those packets originate from the same computer, by checking for similarities in a number of TCP/IP protocol header fields. To build up sufficient certainty that IP addres…
Comment linking /internet-data-mining/hosting-provider-server-count/
on “Simpler cloud services try to undercut the established giants”> 1: fun fact, Apache ran 50% of websites in 2009, by 2022 this share fell below 25%. Apache isn't far behind nginx currently. https://www.netcraft.com/blog/july-2023-web-server-survey/
Comment linking /blog/july-2023-web-server-survey/
on “LibreOffice 24.2 Will Succeed LibreOffice 7.6”
