https://bluekit.su/
172.67.186.119 · Cloudflare, Inc.
Toronto, Canada
—
200 · 35.2s
Valid· E8, Let's Encrypt, US
COMPLETED
No KB/IOK detections were recorded for this scan.
technology | finance | ecommerce | social_media | other · 4/29/2026
The page at bluekit.su presents branding for a phishing kit service with explicit references in the page title and content. Visuals show a dashboard-like UI and branding that mimics legitimate analytics dashboards, and the HTML title explicitly states 'bluekit - your phishing kit'. However, the domain bluekit.su does not belong to a widely recognized legitimate brand, and the content centers on phishing-kit capabilities. The site uses dynamic SPA-like behavior with numerous external scripts and Cloudflare fronting requests, suggesting an intentionally hosted phishing tooling platform rather than a legitimate first-party service, but the evidence primarily indicates impersonation of intent rather than a direct credential-collection page on a known brand. Given the evidence, classify as potential credential-phishing/abuse platform with impersonation indicators, but the data does not conclusively show a live credential submission form on this domain in the static HTML.
Capture
Stages: 3
Canonical: Late Render (+3s)
Changed: No
Credential Signals
Forms: 0
Password fields: 0
Late-stage login UI: No
Resource Signals
Resources: 50
Hosts: 2
Domains: 2
The scan indicates a hosted phishing tooling platform with strong indicators of credential-phishing-oriented UI (title 'your phishing kit' and dashboard-like branding). The static HTML contains no login form, but the SPA nature means credentials could be captured via dynamically rendered forms. The presence of multiple external script files, numerous resource loads, and POST requests to anti-bot endpoints suggests intent to deploy and operate a phishing toolkit rather than legitimate analytics. Given the branding and observed network behavior, this site should be treated as malicious and impersonation-focused; monitor and consider takedown actions if abuse confirmation is established.
Monitor