Next-Gen Cyber-Threat Intelligence & Forensic Educational Simulation Engine
PhishGuard is an enterprise-grade cybersecurity awareness and threat intelligence platform engineered to educate users on the sophisticated mechanics of modern social engineering attacks. By transforming passive cybersecurity training into an interactive forensic investigation, PhishGuard simulates real-world attack vectors—including Homograph Impersonation, SMS Smishing, QR Quishing, and Adversary-in-the-Middle (AiTM) MFA Interception.
- Production Portal: https://phishguard.luckyverse.tech
- API Documentation & Swagger UI: Available via backend
/api/docsin production environments.
A hybrid analysis engine capable of evaluating suspicious URLs and domains through multi-layer verification:
- Punycode & Homograph Recognition: Unmasks look-alike Unicode characters (e.g., Cyrillic
аvs. Latina,rnvsm) used in visual spoofing. - Brand Typosquatting Engine: Utilizes Levenshtein distance calculations against high-value global brands (Google, Microsoft, PayPal, Netflix, Amazon, Apple, Meta).
- Subdomain Deception Detection: Detects misleading subdomains crafted to disguise malicious root domains (e.g.,
paypal.com.account-update.net). - Protocol & TLD Risk Profiling: Flags insecure plaintext HTTP, high-risk top-level domains (
.top,.xyz,.click,.buzz), and IP-based hostnames. - Deep Network Diagnostics: Integrates backend DNS record inspection (MX/A records), TLS/SSL certificate validation, and HTML page structure heuristics.
High-fidelity visual recreations of enterprise login and service portals for interactive deconstruction:
- Interactive Red-Flag Hotspots: Point-and-click breakdown of subtle deception cues such as fraudulent sender addresses, domain discrepancies, and deceptive action buttons.
- Email Header Forensics Inspector: Technical deconstruction of raw RFC 822 email headers, analyzing
Receivedhops, SPF verification, DKIM signatures, and DMARC alignment. - High-Target Platform Replicas: Detailed autopsy models for Microsoft 365, Google Accounts, Metamask Web3, Netflix Billing, and Amazon Security alerts.
Hands-on interactive simulators providing an "Attacker Console" perspective to demystify complex social engineering techniques:
- Bank OTP & AiTM Interception Lab: Demonstrates how modern phishing reverse-proxies capture one-time passwords and session tokens in real time, rendering traditional SMS 2FA ineffective.
- Mobile Smishing Simulator: Interactive smartphone interface analyzing urgent SMS delivery notifications, banking security alerts, and shortened phishing links.
- QR Quishing Lab: Explores malicious QR code mechanics, physical tamper detection, and URL obfuscation embedded inside QR payloads.
An authoritative knowledge repository documenting modern social engineering tactics:
- Comprehensive profiles on emerging threats: QR Quishing, Deepfake Voice Vishing, Angler Phishing, Executive Whaling, OAuth Token Grant Hijacking, and Business Email Compromise (BEC).
- Detailed technical risk ratings, real-world breach case studies, and actionable counter-defense playbooks.
- Dynamic cybersecurity scenario modules testing practical threat identification capabilities.
- Real-time scoring, analytical feedback, and post-assessment remediation insights.
- Aggregated real-time security bulletins, vulnerability disclosures, and critical phishing advisories sourced directly from global cybersecurity intelligence networks.
PhishGuard is built upon a decoupled, high-performance architecture optimized for sub-millisecond client-side heuristics and robust server-side forensic inspection:
┌─────────────────────────────────────────────────────────────┐
│ PhishGuard Client │
│ • React 19 (High Performance Virtual DOM) │
│ • Tailwind CSS 4 (SOC-Grade Dark/Light Design System) │
│ • Framer Motion (Hardware-Accelerated UI Micro-Interactions)│
│ • Client-Side Heuristic Detection Engine (12+ Rule Checks)│
└──────────────────────────────┬──────────────────────────────┘
│ HTTPS / JSON-RPC
┌──────────────────────────────▼──────────────────────────────┐
│ PhishGuard API Service │
│ • FastAPI (Asynchronous Python 3.12 Engine) │
│ • Pydantic v2 (Strict Schema Validation & Settings) │
│ • DNS & TLS Diagnostics (dnspython, SSL Handshake Engine) │
│ • HTML & DOM Parser (BeautifulSoup4, tldextract) │
│ • Live Threat Intelligence Aggregator (FeedParser) │
└─────────────────────────────────────────────────────────────┘
- Zero-Storage Privacy Model: URL heuristic analysis is evaluated locally in the client browser. No analyzed URLs, credentials, or telemetry logs are permanently stored or sold.
- Defensive Headers & Hardening: Production deployments enforce strict Content Security Policy (CSP), HTTP Strict Transport Security (HSTS),
X-Content-Type-Options: nosniff, andX-Frame-Options: DENY. - Educational Isolation: All simulation environments operate in isolated, sanitized containers without transmitting real credential payloads to remote targets.
Copyright © 2026 Lucky. All Rights Reserved.
This platform and its proprietary detection logic, simulation models, and educational content are protected under applicable intellectual property laws. Unauthorized duplication, modification, or commercial distribution is strictly prohibited.
Developed with ❤️ by Lucky