Is this email phishing?

Paste the message body (and headers if you have them). The check runs entirely in your browser — nothing is uploaded, logged, or stored.

Message text

How this check works

It looks for the same recognizable patterns an analyst scans for first: manufactured urgency, requests to authenticate from inside the message, payment or banking changes, link obfuscation (shorteners, unusual TLDs, raw IPs), generic greetings, and high-risk attachment types. Each match adds weight to a score. It is a triage aid, not a verdict — a clean score never proves a message is safe.

Learn the terminology in the security glossary, or decode the delivery path with the email header decoder.