All tools/Malware & App Analysis/02

Phishing Kit Fingerprinter

One URL, checked against the signatures of the kits actually running phishing campaigns.

Paste a suspicious URL. We probe it server-side for Bluekit, Evilginx, GoPhish, and Modlishka signatures — checking domain age, DNS, HTML/JS patterns, and live threat feeds.

Try:

Sample result. These findings are real output from scanning https://example.com on 2026-09-13. Your own input was not scanned, and nothing you enter here leaves your browser.

Live access is by invitation. Verify an approved email to run this page against your own target, or ask for access.

Detects signatures from

Bluekit

AI PhaaS, Telegram exfil, 40+ brand templates

Evilginx2/3

AiTM reverse proxy, real session capture, MFA bypass

GoPhish

Open-source simulation, ?rid= tracking links

Modlishka

Go-based AiTM reverse proxy, ?pl= lure links

Privacy — nothing is fetched at all

This deployment demonstrates the tool rather than running it. No URL you enter is fetched, looked up, or sent anywhere — the result shown is a previously captured scan.

hodan.ai — Security tooling