Domain Tracker

The pixel tracker has been done on websites all over the internet. It's a well-known way to implement user tracking and analytics. I took this a step further by setting up an SMTP function that sent an email with various header information when the tracker detected a user or a bot.

This was particularly useful for the Information Security Office, not to track individual users, but to instead track malicious duplicates of university websites. This was to be used as a preventative tool to report and remove phishing attempts before they would affect a large number of people. This project came into reality following a scam attempt where a false login was sent to a huge mailing list.

The tool was to be present on all university sites, monitoring all visits to the UO-owned domains. If a suspected malicious domain was present in the visits, the tool would then send out an email to the corresponding IR officials, alerting them of the fake site's location and potentially preventing hundreds of phishing emails from faking authenticity.

This project unfortunately never made it past the office, as the conclusion was that although the tool was strong at detections, it was very noisy and added a significant network delay to the sites it was on, (Among a few other issues). At the time of this conclusion, there were also similar IR tools already in use, so it was put on the backlog in lieu of using the stronger software.

This project was done simply using JS, with some small REST API setup. Unfortunately, there's not a lot of media to show.