All agents · Defensive security
Phishing Triage
BetaA verdict on a reported email (likely phishing, suspicious, likely legitimate, or not enough information) with indicators, header checks, and defanged links.
How it works
Paste a reported email with its full headers. Links, sender/reply-to mismatches, SPF/DKIM/DMARC results, risky attachments, and pressure language are extracted in code; every link is defanged (hxxps://example[.]com) and is never opened, fetched, or resolved. The AI weighs the indicators and recommends next steps.
What you give it
- Pasted email with headers
- .eml or .txt export
Limitations
- Defensive triage only. Doesn't open links, detonate attachments, or check reputation services.
- Without full headers, sender checks are limited.
- A verdict is advice for your security team, not a guarantee.