I don't know how people see Usher and Alicia Keys just balling out, actually performing and singing, and the reaction is that it was terrible, like whaaat
Oh my goodness I need this.
So, say there's a domain you suspect is being used for phishing but you don't have any examples of a phishing campaign and the webpage 403s for you. Let's assume, hypothetically, that the only way to access the page is via specific URLs with a token or whatever (essentially a fuzzer is no good at finding these URLs).
How would you investigate whether this domain is being used for phishing or not?