- Use the NetCraft API to send URLs to Netcraft to report as phishing sites.
- Netcraft API Documentation.
- Import the module
PS C:\temp> Import-Module .\send-toNetcraft.psm1- If you want to install the module for long-term use
- See Microsoft documentation.
- Shortcut - just copy to its own folder in this location: $Env:ProgramFiles\WindowsPowerShell\Modules
PS C:\temp> copy .\send-toNetcraft.psm1 $Env:ProgramFiles\WindowsPowerShell\Modules\send-toNetcraft\send-toNetcraft.psm1-
Change parameters on the following lines:
- 55: Default Email address you will submit as
- 57: Default reason for submitting (phish by default)
- 71: Pick the $prod or $test URI endpoint ($prod by default)
-
Mandatory parameter
- -u: URL
- Comma separated for multiple
-
Optional parameters - The defaults can be changed in your .psm1 file (lines 51 & 53 as noted above):
- -e: Email address to report as
- -r: Reason for reporting
- the reason 'pk' can be used as a substitute for 'phishing kit'
-
Examples:
send-toNetcraft -u http://superfake.com/really/really/awful.php
send-toNetcraft -u https://veryphishy.buzz/very/phishy/o365.html -e some@example.com -r phishing
send-toNetcraft -u https://veryphishy.buzz/very/phishy.zip -r "phishing kit"
send-toNetcraft -u www.badguyz.top/very/badstuff.php,reallylame.xyz/badstuff.asp
send-toNetcraft -u www.scams-r-us.xyz/folder1/folder1.zip -r pk- URL Count: number of URLs submitted
- Submitting: URLs being submitted - 1 per line
- with address: email address submitting the URL
- Result Status: HTTP response code
- Result Message: HTTP response message
- Result UUID: Unique ID from Netcraft for your submission
- Submission URL: The URL of results for the submission
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent