Being a blue teamer, dedicated to protecting client infrastructure, I was researching various methods and techniques on how I could potentially detect phishing websites both accurately and at scale through automation. Detecting these is a clear indication of domain takeover and I go into further detail on my thinking behind creating these detection templates as well as the process I followed when creating them in the blog post below.

Image from projectdiscovery.io