Netcraft
netcraft · B · candidate
https://www.netcraft.com/blog/
Phishing/PhaaS and brand-abuse research lab; surfaced the Bluekit Browser-in-the-Middle PhaaS analysis (2026-06-28 brief, § 3). Discovered via WebSearch pivot from the Bluekit research item. Candidate; promote to active after 3 runs with content contribution. | 2026-07-05 admiralty audit: B (MEDIUM->B), established original phishing/PhaaS research lab. Keep candidate for now (single contribution) but promotion-ready: clean fetch history, clearly relevant. | 2026-10-02 (2026-10-02T0404Z-intel): /blog/ resolves to a Framer page; `url https://www.netcraft.com/resources/blog` lists posts as 'Mon. D, YYYY | summary' with slugs under /blog/<slug>. | 2026-10-10: `extract` of the blog listing returns navigation text only; `url https://www.netcraft.com/resources/blog` returns the full HTML, post cards carry date and title and slugs appear as /blog/<slug>, and each post then extracts cleanly.
Cited in 2 entries
Citation cadence
Citation days per ISO week (18 weeks of coverage span, total 2).
- Phishing lures sent as ICS calendar invites land in Outlook and Gmail calendars without a click and stay after the email is deleted; EvilTokens used them for Microsoft 365 device-code phishing2026-10-19
- Netcraft: Bluekit PhaaS uses Browser-in-the-Middle to defeat FIDO2 and Device Bound Session Credentials2026-06-28