[feature]/[use-case] phishing page monitoring

[danieleperera]

I see great potential in this tool for monitoring phishing pages. It happens to me often to detect new phishing campaigns and to monitor when the malicious website is taken down by the registrar or hosting provider.

During the monitoring of these pages, there are several tasks that I currently perform manually or by using custom scripts but can be easily automated using this tool. For example:

• Retrieving all domains that are used to redirect to the final phishing page. Usually, when scammers create a phishing website, they also add a number of redirects. The tool could follow all redirect domains and provide a list of them.
• Providing the ability to download a complete mirror of all the resources used in the phishing site.
• Continuously monitoring the domain even after the takedown actions are complete. This is because the scammer could change the hosting provider and relaunch the attack.
• Provide the possibility to download the screenshots via API
• Another extra feature that could be interesting is maybe to spam the phishing form with fake details making it more difficult for the scammer to identify fake information from a real victims data, but this feature could also be abused for other purposes.

Automating these tasks can save time and improve the effectiveness of phishing detection and prevention efforts. The tool has great potential to enhance the security of organizations and individuals against phishing attacks.

[danieleperera]

Any updates on this use-case?

[dgtlmoon]

everything you asked for is really outside the scope of this project

[dgtlmoon]

except for fetching the screenshot via API, theres a feature request there already