Phishcan provides crucial threat intelligence, and it currently tracks phishing domains for:

• Scotiabank, Desjardins, RBC, Interac…

• Telecom providers, provincial power and health services...

• Federal & provincial services, CRA, Canada Post, Service Canada, Revenue Québec...

How Phishcan works:

• Parsing millions of domains: Continuously scanning and analyzing vast numbers of domains to detect suspicious patterns and potential phishing sites.

• Monitoring threat actors : close watch on cyber‑criminal infrastructures and their new domain registrations.

• Data enrichment : adding contextual insights and connections to improve the information

• Feeds are updated every 12 hours.

• You can use the API freely at: https://phishcan.com/api-docs

Data is also available on: https://github.com/Phishcan/phishcan-data

I plan to improve the whole platform with more data during my free time!

This is pretty interesting!

I am curious - who are you, and why should I (or other Canadian information security professionals) trust this data over other threat intelligence sources?

I admit to only doing a casual, cursory check, but the website, github and linkedin account all appear to be configured to conceal who is behind the site, and the only third party credited is an American company.

This is great! Which aspects of this are Canada specific? Would it be technically practical to expand it to other TLDs?

Super cool!

This is interesting. I was thinking about building a similar solution around GRC but this time focusing on AI regulations, AI threats, breaches, 0-days etc. Out of curiosity did you use agents for this or a platform like Exa AI?