Phishing Reporter

Report dangerous URLs to abuse/safety services via browser automation.

Reporting Strategy

Report to all applicable services in order:

1. 1. Google Safe Browsing (automated) — global reach, blocks in Chrome/Firefox/Safari
2. NCSC Switzerland (semi-automated) — Swiss national cyber security centre
3. Domain registrar (manual) — WHOIS lookup → abuse contact

Service 1: Google Safe Browsing (fully automated)

URL: INLINECODE0

Workflow

Use the browser tool (profile: openclaw) to automate:

1. 1. Open the URL above
2. Report Type: "This page is not safe" (default, leave as-is)
3. Click "Threat Type" dropdown → select "Social Engineering" (for phishing)
4. Click "Threat Category" dropdown → select best match (see references/services.md)
5. Click URL textbox → type the phishing URL
6. Click Additional details textbox → type description
7. Click Submit
8. Verify "Submission was successful" message

Notes

• - Form uses custom dropdowns: click combobox → click option in listbox
• reCAPTCHA v3 runs invisibly — usually passes for headless browsers
• If CAPTCHA blocks: provide manual instructions as fallback

Service 2: NCSC Switzerland (chat wizard)

URL: INLINECODE2

The NCSC uses a multi-step chat wizard (not a simple form). Automate via browser:

Chat Path for Phishing Website Reports

1. 1. Open INLINECODE3
2. Click: "A website/a web service/a web platform"
3. Click: "I would like to report a third-party website"
4. Click: "The website displays fraudulent content"
5. Click: "The website copies another known website" (for phishing clones)
6. Continue through remaining steps (URL input, description, contact info)
7. Submit the report

Direct Path URL (skips first steps)

Notes

• - Wizard is stateful — each step reveals the next
• No CAPTCHA, but many clicks required
• Email alternative: notification@ncsc.ch (include URL and description)
• If automation fails, provide the direct path URL + instructions

Service 3: Domain Registrar (manual lookup)

1. 1. Run WHOIS lookup: whois <domain> or use INLINECODE6
2. Find "Registrar Abuse Contact Email"
3. Send abuse email with phishing URL and description

Additional Details Template

CODEBLOCK1

Fallback: Manual Instructions

If automated submission fails, provide the user with:

1. 1. Direct links to each reporting form
2. The URL to report
3. Recommended categories/types
4. Pre-written description text

Additional Reporting Services

See references/services.md for full list including Cloudflare, PhishTank, and APWG.