Top all-time · #22470
phish.report
Company blog · phish.report/blog · on HN as bradleyjkempsecurityweb
phish.report is the company blog at phish.report, writing about security and web. Since 2021, 3 different Hacker News readers have linked it 11 times, most often “Show HN: Phish.Report – a shortcut to report phishing wherever it's hosted”. No feed was found, so read it on the site itself.
Too few sampled comments (1) to say how often HN recommends it.?
Why HN links it
HN readers link phish.report as a tool for reporting phishing sites and brand impersonation. One commenter suggests it for getting a phishing site taken down, noting Cloudflare-hosted sites are unlikely to be removed.
Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Detect, disrupt, and deter consumer phishing attacks. Phish Report gives your team the same capabilities as leading brand protection services.
Most-linked posts?
- Show HN: Phish.Report – a shortcut to report phishing wherever it's hosted3 people · 6 mentions · first linked 2021-06-01
What Hacker News says?
My principle for https://phish.report (a tool for semi-automating the reporting of phishing sites) is: do as much statically or server side rendered as possible. Deployment: Docker Compose. It's great to just set a DOCKER_HOST environment variable and I can deploy to any server with Docker installed. Backend: a Go service. Could be any language really but that's what I know. Just takes requests, does some business l…
Comment linking /
on “Ask HN: Companies of one, what is your tech stack?”Submitted Show HN: Phish.Report – a shortcut to report phishing wherever it's hosted as a story · 6 points
HN discussionIt's really common now for phishing kits to use interstitial pages that require solving a captcha before the actual phishing content is shown Victims just click through the captcha without thinking, but it makes automatic verdicting by security scanners a pain because they just see a captcha page: can't tell the brand being impersonated, or even if it's a phishing site I wrote a post about a number of these which ac…
Comment linking /blog/fake-cloudflare-interstitials
on “MapTCHA, the open-source CAPTCHA that improves OpenStreetMap [video]”Submitted Report Any Phishing Site as a story · 4 points
HN discussionAs part of my job, I report a lot of phishing sites. This gets very annoying very quickly. As well as reporting to SafeBrowsing, etc. for each site you also need to look up the domain registrar and hosting provider (via WHOIS) and email them. Rather than do this manually every time, I wrote a small CLI to automate the lookups and even open pre-templated emails: https://github.com/bradleyjkemp/abwhose I'm now redoing…
Comment linking /
on “Ask HN: Tools you have made for yourself?”Submitted Show HN: IOK – an open ruleset and DSL for detecting phishing kits as a story · 2 points
HN discussionI report a lot of phishing sites but it gets very annoying very quickly. As well as reporting to SafeBrowsing, etc. for each site you also need to look up the domain registrar and hosting provider (via WHOIS) and email them. Rather than do this manually every time, I wrote a small CLI to automate the lookups and even open pre-templated emails: https://github.com/bradleyjkemp/abwhose I'm now redoing this as a web app…
Comment linking /
on “Show HN: Phish.Report – a shortcut to report phishing wherever it's hosted”Submitted Detecting phishing sites with high-entropy strings as a story · 1 points
HN discussionTry https://phish.report - although if the site is behind Cloudflare there’s basically zero chance they’ll take it down.
Comment linking /
on “Ask HN: Found a phishing site. Is there anyway to get it taken down?”Submitted Detecting phishing sites with high-entropy strings as a story · 1 points
HN discussionSubmitted Flake IDs and insensitive ticketing systems as a story · 1 points
HN discussion