Fingerprint phishing lure pages and cluster campaigns by shared kit lineage
-
Updated
Sep 27, 2026 - Python
Fingerprint phishing lure pages and cluster campaigns by shared kit lineage
Find recent phishing and malware on infrastructure that still looks legitimate — feeds, scoring, RDAP/DNS enrichment, CDN split detection, and shared-host clustering.
Map abused RMM / ScreenConnect installers to relay hosts and campaign clusters
To associate your repository with the intercept-cell topic, visit your repo's landing page and select "manage topics."