// FREE PHISHING EMAIL CHECKER
Drop in any suspicious message, a URL, or just a sender address. This checks it against 14 phishing indicators and tells you what tripped — and why.
| Indicator | Why attackers use it |
|---|---|
| Lookalike sender domain | micros0ft.com, comp4ny-exec.com — digits swapped for letters |
| URL shortener | Hides the true destination from a quick glance |
| Raw IP address as host | No domain to inspect or reputation-check |
| Password-expiry pressure | The oldest credential-harvesting lever there is |
| Short artificial deadline | Urgency that stops you thinking |
| Threat of suspension | Fear of losing access or service |
| Request for secrecy | Genuine security processes never demand it |
| Unexpected payment request | Core of invoice and CEO fraud |
| Generic greeting | Real services address you by name |
| Fake security alert | Spoofed warnings used to prompt clicks |
| Executable attachment | .exe .js .scr .ps1 .bat |
| Double file extension | Invoice.pdf.js is a script, not a document |
| QR code in email | Defeats link inspection completely |
| Instruction to click a link | Real services let you navigate there yourself |
This is the same detection engine that ships inside LUNCHIE'SWORLD, which also generates watermarked training scenarios and logs who authorised each one — so you can run a security-awareness programme, not just spot one email. Get the app →