🎁 Get the FREE AI Skills Starter Guide β€” Subscribe β†’
BytesAgainBytesAgain
πŸ¦€ ClawHub

Phishing Reporter

by @xenofex7

Report phishing, malware, and scam URLs to Google Safe Browsing, NCSC (Swiss Cyber Security), and other abuse reporting services. Use when a user shares a su...

Versionv1.1.0
Downloads967
TERMINAL
clawhub install phishing-reporter

πŸ“– About This Skill


name: phishing-reporter description: Report phishing, malware, and scam URLs to Google Safe Browsing, NCSC (Swiss Cyber Security), and other abuse reporting services. Use when a user shares a suspicious/phishing URL and wants it reported, or asks to report a dangerous website. Triggers on phrases like "report phishing", "melde diese Seite", "report this URL", "phishing melden", "scam melden", "report abuse".

Phishing Reporter

Report dangerous URLs to abuse/safety services via browser automation.

Reporting Strategy

Report to all applicable services in order:

1. Google Safe Browsing (automated) β€” global reach, blocks in Chrome/Firefox/Safari 2. NCSC Switzerland (semi-automated) β€” Swiss national cyber security centre 3. Domain registrar (manual) β€” WHOIS lookup β†’ abuse contact

Service 1: Google Safe Browsing (fully automated)

URL: https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en

Workflow

Use the browser tool (profile: openclaw) to automate:

1. Open the URL above 2. Report Type: "This page is not safe" (default, leave as-is) 3. Click "Threat Type" dropdown β†’ select "Social Engineering" (for phishing) 4. Click "Threat Category" dropdown β†’ select best match (see references/services.md) 5. Click URL textbox β†’ type the phishing URL 6. Click Additional details textbox β†’ type description 7. Click Submit 8. Verify "Submission was successful" message

Notes

  • Form uses custom dropdowns: click combobox β†’ click option in listbox
  • reCAPTCHA v3 runs invisibly β€” usually passes for headless browsers
  • If CAPTCHA blocks: provide manual instructions as fallback
  • Service 2: NCSC Switzerland (chat wizard)

    URL: https://www.report.ncsc.admin.ch/en/

    The NCSC uses a multi-step chat wizard (not a simple form). Automate via browser:

    Chat Path for Phishing Website Reports

    1. Open https://www.report.ncsc.admin.ch/en/chat?path=406%3E407%3E1 2. Click: "A website/a web service/a web platform" 3. Click: "I would like to report a third-party website" 4. Click: "The website displays fraudulent content" 5. Click: "The website copies another known website" (for phishing clones) 6. Continue through remaining steps (URL input, description, contact info) 7. Submit the report

    Direct Path URL (skips first steps)

    https://www.report.ncsc.admin.ch/en/chat?path=406%3E407%3E1%3E128%3E132%3E133%3E314%3E130%3E135
    

    Notes

  • Wizard is stateful β€” each step reveals the next
  • No CAPTCHA, but many clicks required
  • Email alternative: notification@ncsc.ch (include URL and description)
  • If automation fails, provide the direct path URL + instructions
  • Service 3: Domain Registrar (manual lookup)

    1. Run WHOIS lookup: whois or use https://who.is/ 2. Find "Registrar Abuse Contact Email" 3. Send abuse email with phishing URL and description

    Additional Details Template

    Phishing site impersonating [BRAND]. Domain mimics [REAL SERVICE] customer service.
    Designed to steal [banking credentials / login data / personal information].
    

    Fallback: Manual Instructions

    If automated submission fails, provide the user with: 1. Direct links to each reporting form 2. The URL to report 3. Recommended categories/types 4. Pre-written description text

    Additional Reporting Services

    See references/services.md for full list including Cloudflare, PhishTank, and APWG.

    πŸ“‹ Tips & Best Practices

  • Form uses custom dropdowns: click combobox β†’ click option in listbox
  • reCAPTCHA v3 runs invisibly β€” usually passes for headless browsers
  • If CAPTCHA blocks: provide manual instructions as fallback