Phishing email triage
Email triage
Drop in a suspicious email and get one verdict built from its headers, links, QR codes and attachments, with IOCs and hunt queries ready to copy.
- Files never leave your browser
- Attachments are read, never opened
- Nothing is stored
Add the suspicious email
Waiting for an email
Headers
The full header-lens analysis: routing, authentication, sender identity and spam verdicts.
Links and QR codes
Unwraps Safe Links and Proofpoint, decodes QR codes, flags lookalikes and hidden tricks.
Attachments
Real file type, hashes, macros, HTML smuggling and risky PDFs, without opening anything.
Why it's safe to drop real emails here
- Processed on your device. The email is parsed in this tab. There is no server behind this page.
- The browser blocks outbound traffic. A Content Security Policy forbids this page from sending requests, so neither the email nor its attachments can leave.
- Nothing is opened or rendered. HTML is read as text, links are never followed, images and remote content never load, and attachments are only inspected as bytes.
- Nothing persists. No cookies or browser storage. Leaving or reloading the page wipes everything.