Sandbox
Detonate suspicious links, phishing emails, and files with automated visual reporting & auto-shutdown.
Phishing Email Triage
Inspect raw .EML headers (SPF/DKIM/DMARC), detonate embedded links, capture visual screenshots, and auto-shutdown.
File & Office Macro Triage
Drop Word/Excel/PDF/EXE attachments to compute SHA-256, extract VBA macros (AutoOpen/Shell), and generate a visual report.
M365 Token Theft Inspector
Detect Evilginx/Tycoon 2FA reverse proxies, OAuth illicit consent grants (client_id & scopes), and Device Code lures.
Phishing Email & Link Detonation
Loads clean environment → opens email & embedded link → captures visual report → shuts down VM.
Suspicious File & Office Macro Detonation
Upload any attachment (.docm, .xlsm, .pdf, .exe, .ps1, .zip) to inspect hashes, VBA macros, and capture a visual report.
M365 AiTM Proxy & OAuth Consent Inspector
Analyze suspicious Microsoft 365 login links, Evilginx session-cookie proxies, or OAuth permission grants.
Visual Detonation Report & Screenshot Reel
Paste any link in the wide bar above or run an analyzer to generate a 4-stage visual capture.
On-Demand Interactive Guest VM
15-minute hard session cap, 10-minute idle cutoff, and clean golden snapshot restore on every launch.
For 95% of phishing links and documents, use the automated detonation bar above—it captures screenshots and shuts down automatically.