Der Phishunt MCP-Server,
verbunden mit einem Klick.

check_domain — Check whether a domain (or URL substring) appears in the phishunt active phishing feed. Returns matching entries with detection metadata if

list_brand_phishings — List active phishing sites targeting a specific brand. Returns the most recent detections with URL, IP, country, cert issuer, hosting org, a

get_recent_detections — Retrieve phishing detections since a given date. Useful for delta-syncing a blocklist or threat intel pipeline. Returned field values are at

get_brand_metadata — Fetch curated metadata for a tracked brand: display name, STIX industry sector and display vertical, primary domain, an AI-authored characte

get_cert_metadata — Fetch factual metadata for a TLS intermediate CA seen on phishing sites: operator, root CA, key type (RSA/ECDSA), typical use case, related

search_phishings — Free-text search across active phishing URLs, domains, and IP addresses. Returns matching detections sorted by most recent first_seen. Use f

analyze_url — Analyze any URL for phishing signals WITHOUT contacting it (passive). Read `verdict` first: it is the single adjudicated call (phishing / li

analyze_url_deep — ACTIVE deep analysis of a URL: unlike analyze_url (which NEVER contacts the target), this tool actively fetches it - HTTP response, TLS cert