EtherScamDB icon indicating copy to clipboard operation
EtherScamDB copied to clipboard

Phishtank linkage suggestion

Open sekisanchi opened this issue 7 years ago • 2 comments

Phishtank can be used to verify the current status of a scam site with a chance to vote, while URLscan is much tend to record keeping/verifying and analysis purpose. We may consider using both in the right place within the lifecycle and UX suitable for community ecosystem purpose.

Sample (I put some of recent active sites there but not getting attentions. Some of exchanges and myetherwallet are listed as targeting brands of phishing scams)

Now I understand Phishtank is a legacy public and crowdsourced phishing mail collection and validation platform, similar to Amazon Mturk is for catalog data correction and general questioner but looks like old and global rank 200K in Alexa

sekisanchi avatar May 27 '18 18:05 sekisanchi

Phishtank is now failing to capture shots widely through submitted entries. Don't know the exact reason, but lighthouse, which phishtank rely on, has a limitation https://github.com/GoogleChrome/lighthouse/issues/5563 and phishers becoming aware of that.

some other contributors saying theirs do not showup. https://lists.phishtank.com/pipermail/phishtank-users/2018-June/thread.html

Please hold research for a while.

sekisanchi avatar Jun 27 '18 09:06 sekisanchi

Phishtank HAD good linkage to URLscan as shown below endorsing the report, and was candedate of oracle to Ethereum ecosystem. https://urlscan.io/search/#ethfast.io https://urlscan.io/result/0aab72f1-8fe3-4a4f-a42e-d09795999b2b

The other oracles is virustotal
https://www.virustotal.com/#/domain/ethfast.io 6/19 nonsec shows one 6/24 sec show eight.

Those are all organically connected. Thinking about connection modeling by UML or any other modeling notations.

This is record keeping purpose.

sekisanchi avatar Jun 27 '18 23:06 sekisanchi