phishing_catcher
A Python tool that catches potential phishing domains in near real-time by analyzing suspicious TLS certificate issuances via CertStream.
What is phishing_catcher?
Phishing Catcher is a Python tool that monitors the Certificate Transparency Log via the CertStream API to detect potential phishing domains in near real-time. It analyzes TLS certificate issuances, scores domain names based on suspicious keywords and TLDs, and alerts users when scores exceed configurable thresholds. The tool helps identify malicious domains that mimic legitimate services to steal credentials or data.
Security analysts, threat hunters, and cybersecurity professionals who need to monitor for phishing campaigns and suspicious domain registrations. It's also suitable for organizations looking to enhance their threat intelligence capabilities with automated detection.
Developers choose Phishing Catcher for its real-time monitoring of certificate transparency logs, customizable scoring system, and ease of deployment via Docker. It provides an open-source, configurable alternative to commercial threat intelligence platforms for phishing domain detection.
Overview
Phishing catcher using Certstream
Use Cases
Best For
- Monitoring Certificate Transparency Logs for suspicious domain registrations
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
