🛠

BankGuard DevKit

hidden route

Internal test toolkit for live API testing at https://api.doy.codes. Not linked from the navbar. Bookmark this page.

URL ScannerMessage AnalyzerAPK ScannerFRI Batch CheckFraud Reports

⚡curl Commands

GETHealth Check

curl -s https://api.doy.codes/health | python -m json.tool

💬Test Messages

MSG_01APK DistributionHas LinkEN

URGENT: Your YONO SBI app is outdated. Download the latest secure version now to avoid account suspension: http://sbifreeapp.in/yono-v3.apk - SBI Team

Use in Message Analyzer:

🔗Test URLs

Safe / Whitelisted

https://www.onlinesbi.sbi/

https://retail.onlinesbi.sbi/retail/login.htm

https://yonomobile.sbi.co.in/

https://www.sbi.co.in/web/personal-banking

https://parivahan.gov.in/parivahan/

https://www.npci.org.in/

📦APK Test Files

MALICIOUS

Fake YONO APK

Valid ZIP/APK structure, package com.sbi.yono, dangerous permissions, no real SBI cert, embedded phishing URLs in DEX stub.

filename

fake_yono.apk

Download

POLYGLOT

Polyglot File

Starts with JPEG magic bytes but is also a valid ZIP. Tests dual-format / polyglot file detection.

filename

polyglot_image.apk

Download

CLEAN

Legit Reference APK

Correct package com.sbi.lotusintouch, minimal safe permissions. Should return clean — use as baseline.

filename

legit_yono_reference.apk

Download

APK files are served from the backend at https://api.doy.codes/devkit/files/. See next section to wire up the backend file-serving endpoint.

🗄️FRI Test Identifiers

Known-bad identifiers for FRI batch-check testing

UPIfraud.test@paytmPHISHINGHIT

UPIscamtest123@yblAPK_DISTRIBUTIONHIT

PHONE9876543210VISHINGHIT

PHONE18001234567DIGITAL_ARRESTHIT

BANK_ACCOUNT123456789012MONEY_MULEHIT

UPIlegit.user@sbi—MISS

PHONE9000000001—MISS

📞Vishing Verification Simulator

Register/Toggle Bank Call Session

Customer ID (CIF)

Phone Number (Calling Number)

Agent Name

Call Session StatusEnable to simulate a genuine outbound bank call

Active Database Sessions

No active call sessions found in DB.

BankGuard DevKit — internal use only. Not indexed, not linked from navbar. All test content is synthetic and harmless.