Second Look

Check whether an email is phishing before you click anything in it.

GitHub

Email

Paste the whole message. Including the raw headers ("Show original" in Gmail) unlocks SPF/DKIM/DMARC checks. Nothing leaves your browser unless you ask the AI.

Paste an email and press Scan.

Where the points come from

—

Signals

—

Links

Highlighted body

—

Delivery path

Authentication

Identity

All headers

Try:

Scan history

Trusted domains

Mail from these domains gets −20 unless SPF or DMARC fail.

Blocked domains

Mail or links from these domains get +40.