Email and SMS Phishing Database

Technical analysis of email headers remains the most reliable method for identifying sophisticated spoofing attempts. Fraudsters frequently manipulate the "From" display name while masking the actual "Return-Path" address, which often originates from compromised servers or look-alike domains. In the context of Canadian banking, we have observed a 40% increase in the use of localized subdomains that mimic legitimate institutional portals.

When examining an SMS (Smishing) message, the "Sender ID" is often the first point of failure. Modern smishing kits use alphanumeric senders or short codes that bypass standard carrier filters. By analyzing the "Reply-To" path and the embedded link's TLD (Top-Level Domain), security professionals can determine the geographic origin of the threat, often pointing to high-risk zones outside of North American jurisdiction.

Furthermore, the use of URL shorteners (e.g., bit.ly, tinyurl) in SMS messages serves to hide the final destination of the victim. Our database tracks these shortened links back to their terminal landing pages, which typically feature high-fidelity clones of Canadian bank login screens. Protecting your assets requires a move beyond visual inspection toward a protocol-based verification mindset, as detailed in our Hardware Security guide.