Breach & Phishing Checks

This Python tool visualizes phishing networks by querying the PhishStats API and mapping URLs, domains, hosts, IP addresses, and related data.

Have I Been Pwned publishes a corpus of previously breached passwords so services can check and block passwords that appear in known breaches.

Check whether email addresses or personal information appear in a data breach with F-Secure’s checker.

Use Mozilla Monitor tools to check exposed personal information and learn how to respond to breaches.

Phish Report guides teams through phishing response, including hosting-provider analysis, verified abuse-reporting steps, and takedown processes.

OpenPhish publishes intelligence about active phishing threats, with a feed and dashboard summarizing recent phishing URLs and targeted brands.

TruffleHog Enterprise scans Git repositories and other sources for exposed credentials, then helps teams detect, assess, and remediate secrets.

PhishStats provides a phishing URL database and real-time feed, with web search and a REST API for threat intelligence and research.

isitPhishing analyzes a URL from a phishing email and reports whether the linked website may be risky; the service is free for noncommercial use.