On this episode of Masters of Data, we sat down with Patrick Kobly, who runs security for a boutique MSSP serving fintech, crypto, and gaming clients, to dig into how phishing has evolved past the obvious tells. Kobly walks through how attackers spin up reverse proxies behind Cloudflare, route through residential IPs to dodge reputation-based blocking, and can take a fake domain from registration to full attack in under five hours. The conversation turns into an unexpected case for treating SEO as a security discipline, since search rank and AI-generated results are now part of the attack surface too. Security and marketing leaders who assume their worlds don’t overlap will want to hear how closely those teams need to work together before the next big campaign launches.
0:00:00 – Welcome and introducing Patrick Kobly
0:00:30 – Patrick’s path to becoming a two-year Sumo Logic customer
0:01:45 – Why fintech, crypto, and gaming attract the sharpest attackers
0:03:11 – Brand equity gaps and AI search reshaping phishing risk
0:06:08 – Fragmented domains and the password reset paradox that trains phishing victims
0:08:56 – Clone sites versus reverse proxies inside advanced phishing infrastructure
0:11:02 – Why IP reputation is dead and how to find better signals
0:13:45 – From domain registration to active attack in under five hours
0:16:12 – SEO as a security discipline, not just a marketing lever
0:19:27 – Building SIEM visibility around patterns, automation, and traffic spikes
0:28:13 – Wrap-up and thanks