home.social

#phishtank — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #phishtank, aggregated by home.social.

fetched live
  1. I found weird #AI #slop in my search results again. This time, it's a website called scam-detector[dot]com. Scam-detector is a service that lets you find out if a website is a scam - all you have to do is provide a URL. Sources basic data like domain age and public block lists as well as — and this seems to matter way more — asking an LLM. It then computes a score from 0(?) to 100 and fills in a template.
    I fed it some stuff from #Phishtank. The first site it didn't like because it saw a login form (clearly pointing at adult content). I then gave it a site (from Phishtank again) that promised to pay you for watching YouTube. The LLM was not critical at all, although the domain age made the score terrible.
    Up next, I grabbed a Microsoft phish from @urldna. The result? A score of 80 points!

  2. I found weird #AI #slop in my search results again. This time, it's a website called scam-detector[dot]com. Scam-detector is a service that lets you find out if a website is a scam - all you have to do is provide a URL. Sources basic data like domain age and public block lists as well as — and this seems to matter way more — asking an LLM. It then computes a score from 0(?) to 100 and fills in a template.
    I fed it some stuff from #Phishtank. The first site it didn't like because it saw a login form (clearly pointing at adult content). I then gave it a site (from Phishtank again) that promised to pay you for watching YouTube. The LLM was not critical at all, although the domain age made the score terrible.
    Up next, I grabbed a Microsoft phish from @urldna. The result? A score of 80 points!

  3. Hey @TwitterSecurity @twitter, I can’t post any links to my blog here (*.0day[.]rocks) because some jokers put it on some phishing lists.
    Please do something? This is an easy censoring method tbh, just trick #phishtank with fake accounts and voilà, DoS. 🤐 (RT appreciated)