Collected research

PhishFarm: A Scalable Framework for Measuring the Effectiveness of Evasion Techniques against Browser Phishing Blacklists

Adam Oest, Yeganeh Safaei, Adam Doupé, Gail-Joon Ahn, Brad Wardman and Kevin Tyers · doi.org

PhishFarm deploys 2,380 live PayPal-branded decoy phishing sites on fresh .com domains, each behind one of six request filters taken from real phishing kits, reports them to 10 anti-phishing entities and times browser blacklisting. Cloaking by geolocation, device type or JavaScript cut the chance of blacklisting by over 55 percent, and mobile browsers failed to warn at all.

Record

Researcher

Adam Oest, Yeganeh Safaei, Adam Doupé, Gail-Joon Ahn, Brad Wardman and Kevin Tyers

Published by

doi.org

Topic

Browser

In the archive

• Collected in the 2019 research round

Related sources

• PhishFarm: A Scalable Framework for Measuring the Effectivness of Evasion Techniques Against...

Tags

• filter-bypass
• detection
• measurement-study
• large-scale-scan
• defence
• mitigation
• owasp-a05-2021
• owasp-a09-2021

This page is the archive's own catalogue record. The research is the work of Adam Oest, Yeganeh Safaei, Adam Doupé, Gail-Joon Ahn, Brad Wardman and Kevin Tyers, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 11 August 2026.