The Security Alliance has released technology built to help experts verify malicious crypto-related websites
A cybersecurity nonprofit has launched a new tool designed to help researchers more effectively identify and confirm crypto phishing attacks, which have caused hundreds of millions in losses this year. The Security Alliance (SEAL) announced the release of its “TLS Attestations and Verifiable Phishing Reports” system, a technology built to help experts verify malicious crypto-related websites even when scammers try to hide them.
Phishing scams remain one of the biggest threats in crypto, with more than $400 million stolen in the first half of the year alone. Many phishing sites now use “cloaking” methods that show harmless content to scanners while serving fraudulent pages to real victims. This tactic has made it increasingly difficult for cybersecurity teams to confirm which links are genuinely dangerous.
SEAL’s new system tackles this problem by allowing trusted users to generate verifiable cryptographic proofs that show exactly what a victim saw. Using a combination of Transport Layer Security (TLS) and an attestation server, the tool captures encrypted data from a suspicious connection and creates an unalterable record of the interaction. Researchers can then submit “Verifiable Phishing Reports” — signed digital evidence confirming a website’s malicious behavior.
The process involves a local proxy that intercepts the connection while an external server manages the encryption and decryption. This setup ensures that the data remains secure and tamper-proof while providing SEAL with enough information to verify claims without visiting the dangerous site itself. The organization emphasized that the tool is intended for cybersecurity professionals and experienced researchers, not general users.
By giving investigators a transparent way to confirm phishing attempts, SEAL hopes to make it harder for attackers to disguise fraudulent activity. The project also promotes collaboration among “white-hat” researchers working to reduce crypto-related scams, marking a small but meaningful step toward making the digital asset space safer for everyone.
