https://phishplug.com/blog.html Field notes on phishing clones, mobile cloaking, lookalike domains and takedowns. en Sun, 04 Oct 2026 08:00:00 +0000 https://phishplug.com/blog-report-phishing-site.html https://phishplug.com/blog-report-phishing-site.html Takedowns Sun, 04 Oct 2026 08:00:00 +0000 Where to send a phishing report, what each abuse desk needs to see, and the evidence that turns a report into a removal instead of a dead-end ticket. https://phishplug.com/blog-mobile-cloaking.html https://phishplug.com/blog-mobile-cloaking.html Cloaking Wed, 30 Sep 2026 08:00:00 +0000 How phishing pages show search crawlers a clean site and real mobile visitors a credential trap — and how dual-profile crawling proves the redirect. https://phishplug.com/blog-typosquatting-homoglyph.html https://phishplug.com/blog-typosquatting-homoglyph.html Detection Sat, 26 Sep 2026 08:00:00 +0000 Two ways attackers fake your domain — one exploits typing mistakes, the other uses look-alike characters. How each works and how to catch both early. https://phishplug.com/blog-takedown-process.html https://phishplug.com/blog-takedown-process.html Takedowns Tue, 22 Sep 2026 08:00:00 +0000 Registrars, hosts, CDNs and safe-browsing desks — where to file, what evidence each one wants, and why routing beats blasting. https://phishplug.com/blog-credential-harvesting.html https://phishplug.com/blog-credential-harvesting.html Threats Fri, 18 Sep 2026 08:00:00 +0000 Credential harvesting is the engine behind most phishing. How fake login pages capture passwords, where the data goes, and how to shut the pipeline down. https://phishplug.com/blog-lookalike-domains.html https://phishplug.com/blog-lookalike-domains.html Detection Mon, 14 Sep 2026 08:00:00 +0000 Typosquatting, homoglyphs and combosquatting — the signals that expose impersonation domains early, from registration to first crawl. https://phishplug.com/blog-fake-login-pages.html https://phishplug.com/blog-fake-login-pages.html Threats Thu, 10 Sep 2026 08:00:00 +0000 Cloned sign-in screens are the sharp end of phishing. The tells that give them away, and why your customers need you watching rather than relying on their eyes. https://phishplug.com/blog-brand-protection.html https://phishplug.com/blog-brand-protection.html Best practices Sun, 06 Sep 2026 08:00:00 +0000 A practical playbook for protecting your brand from phishing impersonation — monitoring, evidence, takedowns and the metrics that matter. https://phishplug.com/blog-social-media-impersonation.html https://phishplug.com/blog-social-media-impersonation.html Threats Fri, 28 Aug 2026 08:00:00 +0000 Fake profiles, cloned pages and lookalike handles target your customers off your own site. How to find, evidence and take down social impersonation. https://phishplug.com/blog-screenshot-not-evidence.html https://phishplug.com/blog-screenshot-not-evidence.html Evidence Thu, 20 Aug 2026 08:00:00 +0000 A screenshot is easy to dismiss and easy to fake. What abuse desks actually need — headers, the cloaking diff and timestamps — to act on first submission. https://phishplug.com/blog-certificate-transparency.html https://phishplug.com/blog-certificate-transparency.html Detection Wed, 12 Aug 2026 08:00:00 +0000 Every TLS certificate is logged publicly. How to turn Certificate Transparency logs into an early-warning system for clones and lookalike domains. https://phishplug.com/blog-phishing-as-a-service.html https://phishplug.com/blog-phishing-as-a-service.html Threats Wed, 05 Aug 2026 08:00:00 +0000 Phishing is now a subscription product: kits, cloaking and hosting sold ready-made. What PhaaS is, why it scales attacks, and what actually stops it. https://phishplug.com/blog-smishing.html https://phishplug.com/blog-smishing.html Threats Wed, 29 Jul 2026 08:00:00 +0000 Phishing by text message bets on urgency and small screens. How smishing lures work, why links are so dangerous on mobile, and how to shut down the pages behind them. https://phishplug.com/blog-vishing.html https://phishplug.com/blog-vishing.html Threats Wed, 22 Jul 2026 08:00:00 +0000 Phone-based phishing uses a human voice to bypass caution. How vishing and callback scams work, the role of spoofed numbers, and where brand protection fits in. https://phishplug.com/blog-business-email-compromise.html https://phishplug.com/blog-business-email-compromise.html Email security Wed, 15 Jul 2026 08:00:00 +0000 BEC skips malware and targets trust: fake invoices, wire fraud and impersonated executives. How it works, why it is so costly, and how to defend against it. https://phishplug.com/blog-spear-phishing.html https://phishplug.com/blog-spear-phishing.html Threats Wed, 08 Jul 2026 08:00:00 +0000 One is a net, the other a spear. How targeted spear phishing differs from mass campaigns, why it works, and what defences actually apply to each. https://phishplug.com/blog-whaling.html https://phishplug.com/blog-whaling.html Threats Wed, 01 Jul 2026 08:00:00 +0000 Whaling aims at leadership, where one approval moves money. How executive-targeted phishing works and the controls that stop a convincing impersonation. https://phishplug.com/blog-clone-phishing.html https://phishplug.com/blog-clone-phishing.html Threats Wed, 24 Jun 2026 08:00:00 +0000 Clone phishing copies a legitimate message and swaps the link or attachment. Why the familiarity makes it dangerous and how to recognise and stop it. https://phishplug.com/blog-quishing.html https://phishplug.com/blog-quishing.html Threats Wed, 17 Jun 2026 08:00:00 +0000 A QR code hides its destination until you scan it. How quishing abuses that trust, where fake codes appear, and how to defend your brand and customers. https://phishplug.com/blog-pharming.html https://phishplug.com/blog-pharming.html Threats Wed, 10 Jun 2026 08:00:00 +0000 Pharming poisons the path between a correct address and the real server. How DNS-based redirection works, why it is hard to spot, and how to reduce the risk. https://phishplug.com/blog-malvertising.html https://phishplug.com/blog-malvertising.html Threats Wed, 03 Jun 2026 08:00:00 +0000 Attackers buy ads on your own brand terms to outrank you and send customers to clones. How malvertising works and how to detect and take it down. https://phishplug.com/blog-phishing-email-red-flags.html https://phishplug.com/blog-phishing-email-red-flags.html Email security Wed, 27 May 2026 08:00:00 +0000 The reliable signals of a phishing email — and the ones that no longer hold. A practical guide for people, plus why brands can't rely on it alone. https://phishplug.com/blog-dmarc-spf-dkim.html https://phishplug.com/blog-dmarc-spf-dkim.html Email security Wed, 20 May 2026 08:00:00 +0000 Three email-authentication standards decide whether someone can send mail as you. What SPF, DKIM and DMARC do, and how to roll them out without breaking mail. https://phishplug.com/blog-email-spoofing.html https://phishplug.com/blog-email-spoofing.html Email security Wed, 13 May 2026 08:00:00 +0000 Why email lets anyone forge a sender, how spoofing underpins phishing and BEC, and the authentication that makes your domain hard to impersonate. https://phishplug.com/blog-domain-monitoring-guide.html https://phishplug.com/blog-domain-monitoring-guide.html Detection Wed, 06 May 2026 08:00:00 +0000 What domain monitoring should actually do, the signals that matter, and the questions to ask — so you catch lookalikes early instead of paying for noise. https://phishplug.com/blog-brandjacking.html https://phishplug.com/blog-brandjacking.html Best practices Wed, 29 Apr 2026 08:00:00 +0000 Brandjacking covers domains, social handles, ads and apps that seize your identity. The forms it takes and how to reclaim and defend your brand. https://phishplug.com/blog-https-padlock-myth.html https://phishplug.com/blog-https-padlock-myth.html Defense Wed, 22 Apr 2026 08:00:00 +0000 The padlock means encrypted, not trustworthy. Why most phishing sites now use HTTPS, and what actually tells you whether a login page is real. https://phishplug.com/blog-account-takeover.html https://phishplug.com/blog-account-takeover.html Threats Wed, 15 Apr 2026 08:00:00 +0000 Account takeover is where phishing pays off. How stolen credentials turn into fraud, why reuse spreads the damage, and how to break the chain. https://phishplug.com/blog-credential-stuffing.html https://phishplug.com/blog-credential-stuffing.html Threats Wed, 08 Apr 2026 08:00:00 +0000 Both attack logins, but in opposite ways. How credential stuffing reuses stolen passwords at scale, how brute force differs, and what stops each. https://phishplug.com/blog-dark-web-monitoring.html https://phishplug.com/blog-dark-web-monitoring.html Detection Wed, 01 Apr 2026 08:00:00 +0000 Leaked passwords fuel account takeover. What dark web monitoring can and can't do, how to act on a hit, and where it fits in a brand-protection programme. https://phishplug.com/blog-incident-response-phishing.html https://phishplug.com/blog-incident-response-phishing.html Defense Wed, 25 Mar 2026 08:00:00 +0000 A clear, calm playbook for the first hours of a phishing attack on your brand — contain, evidence, take down, communicate and learn. https://phishplug.com/blog-ai-phishing.html https://phishplug.com/blog-ai-phishing.html Threats Wed, 18 Mar 2026 08:00:00 +0000 AI writes flawless lures and clones voices and faces. How attackers use it, why old 'spot the typo' advice is failing, and what still works.