CYBERDRAGON
OPEN-SOURCE COMMUNITY CYBER DEFENSE · v1.0

Scams are getting smarter.
Defend with evidence.

Inspect suspicious SMS messages, phishing domains, Mobile Money reversal traps, and USSD diversion codes. Get explainable risk breakdowns and PII-redacted incident reports—with zero external link visits.

Launch Threat Workbench Emergency Response Guides
✓ 100% SSRF-Free Static Analysis✓ Mobile Money & USSD Aware✓ Automatic PII Redaction✓ CLI & FastAPI Included
01 / DRAGON SHIELD WORKBENCH

Inspect a suspicious message, URL, or USSD code

Select an inspection mode or load a realistic fraud scenario below to see how Cyber Dragon deconstructs digital threats without opening untrusted links.

● ENGINE v1.0 READY
Interactive Threat Scenario Library (8 Verified Presets):Click any scenario to run an instant explainable analysis
Your input is analyzed locally in this browser tab. Nothing leaves your device.
0 / 8,000 characters

🔒 Privacy & Safety Guarantee: Never paste real passwords or active PINs. Incident reports automatically scrub phone numbers, 4–8 digit codes, emails, and URLs. Heuristic checks do not guarantee a message or link is safe.

02 / DEFENSIVE HABITS

Three habits that stop most digital fraud.

Even against new scam templates, these three verification steps protect your accounts and mobile wallets.

01

Pause before dialing or replying

Scammers manufacture urgency, fear, or excitement so you act before verifying. Take 60 seconds to inspect the request.

02

Verify balances & alerts out-of-band

Never trust an SMS deposit alert alone. Check your real wallet balance using your official app or standard menu, and never dial unfamiliar *21* or *165* strings.

03

Guard your PIN, OTP & SIM

Telecom operators, banks, and regulators never ask for your PIN or 6-digit verification code. Dial ##002# immediately if you suspect call forwarding.

03 / DRAGON ACADEMY

Already clicked a link, dialed a code, or sent money?

Follow step-by-step containment guides for Mobile Money fraud, USSD call forwarding (`##002#`), WhatsApp OTP hijacks, and credential leaks.

Open emergency response guides ↗
OPEN SOURCE · CLI & FASTAPI

Built for communities, developers, and security responders.

Run Cyber Dragon in the browser, via the Node.js CLI (`npx cyber-dragon scan`), or as a self-hosted FastAPI microservice (`services/threat-api`).

View Source & CLI Docs on GitHub ↗