Direct answer
Can the methodology be cited? Yes. Use the citation page and stable URLs.
Snapshot-first model
Public pages read cached snapshots and static research. They do not trigger collection, liveness checks, screenshots, OCR, graph clustering or export jobs.
Confirmation states
Confirmed, corroborated suspicious, review candidate and context-only observations remain separate. Feed presence is not treated as liveness.
Country relevance
Country relevance is explained through brands, language, source, payment routes, phones, official baselines and evidence; it is not just TLD or IP geography.
How PhishNet uses this
Inside PhishNet this topic is treated as operational graph context: observations are linked to sources, evidence, Belgian relevance, confirmation state, liveness, campaigns and exports. Public pages explain the method; authenticated users can pivot into the full platform workflow when a signal needs investigation or handoff.
Selected sources and research
These pages combine PhishNet platform knowledge with public research, official Belgian sources and open OSINT documentation.
Common questions
Can the methodology be cited?
Yes. Use the citation page and stable URLs.