Phishing Detection Tool
Paste an email and get a quick risk score, clear red flags and what to do next – without scare tactics.
Runs locally in your browser. Nothing is uploaded. If you’re unsure, check with your IT Support before clicking anything.
How to use the Phishing Detector
Answer the four quick questions
They set context (known sender, expected email, normal writing style, urgency).Paste the email body
Include the full text, including any “Update now” type wording.
If the email is blank and only has an attachment, leave the body empty and set the attachment type.Select the attachment type (if there is one)
Pay attention to HTML/HTM and ZIP – these are common phishing delivery methods.Optional: add advanced details
Click Show advanced fields and add any of the following (only if you have them):
From / Reply-To address
Primary link URL (destination)
Email headers (optional – for IT teams)
Header tip: DKIM “pass” can be from a relay that re-signed the message. DMARC pass is the stronger trust signal.
Read the output
You’ll get:
A risk score and risk level
A list of red flags
Links found in the text
Optional header signals (SPF/DKIM/DMARC)
If the result is Medium or High
Don’t click links or open attachments
Verify the request using a known number or a fresh message you start yourself
If this is work email, report it to your IT/security team
Disclaimer
This tool provides general guidance only and does not constitute advice. If you’re unsure, don’t click anything — check with your local IT Support.