4 ms·

Why email? It's not an email service at all....I guess we need to improve our content marketing but we don't have the word email anywhere on our site. Having sa

Why email? It's not an email service at all....I guess we need to improve our content marketing but we don't have the word email anywhere on our site. Having said that the main service is an API that you can use for a lot use cases for example a good use case is an incident response team that goes manually through a lot of phishing reports to tag them and some hosting providers that goes through their websites to get down phishing or hacked website

ris 8y ago
So... the idea is (potentially) for a provider's mail filters to extract links from emails and submit them to your API, raising an alert if it's a close match for a known site but not on a whitelisted domain?
- yevpats 8y ago
  No it won't work for an email at all. You can't integrate it with email links because the service needs to surf to the url to take a screenshot and then analyze the screenshot. If we will click on every link in an email will make chaos and unsubscribe everyone from everything and decline/accept/maybe all invitations:) The use case is more appropriate for Incident-response teams that go manually through tons of URLs to classify them or Hosting providers that go through tons of websites to check if phishing websites are hosted or some sites were hacked. Essentially any use case where you have a feed of urls that you can access from the web and tag/find phishing websites
- jlgaddis 8y ago
  The existing URIBLs are great at this (without having to upload every web page you're looking at).
ghostly_s 8y ago
"Phishing is the attempt to obtain sensitive information such as usernames, passwords, and credit card details (and money), often for malicious reasons, by disguising as a trustworthy entity in an electronic communication." [1] 'electronic communication' is generally considered a synonym for 'e-mail'. If that's not what your service is targeting, you should probably explain it. 1. https://en.wikipedia.org/wiki/Phishing https://en.wikipedia.org/wiki/Phishing
- yevpats 8y ago
  so to make it a little more clear: Phishing can come in a lot of forms from telephone to websites to sms-phishing, whatsapp etc... We specialize in comparing visually website to our own database of legit websites and then comparing the domain to detect fake/phishing websites that hosted on different domains. For example, we detect that website looks like paypal and then we check if it's hosted on one of paypal domain (paypal.com,paypal.uk etc...)
  - alexbeloi 8y ago
    Who is your target market?

ris 8y ago

So... the idea is (potentially) for a provider's mail filters to extract links from emails and submit them to your API, raising an alert if it's a close match for a known site but not on a whitelisted domain?

yevpats 8y ago
No it won't work for an email at all. You can't integrate it with email links because the service needs to surf to the url to take a screenshot and then analyze the screenshot. If we will click on every link in an email will make chaos and unsubscribe everyone from everything and decline/accept/maybe all invitations:) The use case is more appropriate for Incident-response teams that go manually through tons of URLs to classify them or Hosting providers that go through tons of websites to check if phishing websites are hosted or some sites were hacked. Essentially any use case where you have a feed of urls that you can access from the web and tag/find phishing websites
jlgaddis 8y ago
The existing URIBLs are great at this (without having to upload every web page you're looking at).

ghostly_s 8y ago

"Phishing is the attempt to obtain sensitive information such as usernames, passwords, and credit card details (and money), often for malicious reasons, by disguising as a trustworthy entity in an electronic communication." [1] 'electronic communication' is generally considered a synonym for 'e-mail'. If that's not what your service is targeting, you should probably explain it. 1. https://en.wikipedia.org/wiki/Phishing https://en.wikipedia.org/wiki/Phishing

yevpats 8y ago
so to make it a little more clear: Phishing can come in a lot of forms from telephone to websites to sms-phishing, whatsapp etc... We specialize in comparing visually website to our own database of legit websites and then comparing the domain to detect fake/phishing websites that hosted on different domains. For example, we detect that website looks like paypal and then we check if it's hosted on one of paypal domain (paypal.com,paypal.uk etc...)
- alexbeloi 8y ago
  Who is your target market?