Scan email or message text for phishing indicators: urgency language, suspicious links, brand impersonation, sensitive-data requests, and look-alike spellings. Heuristic — runs entirely in your browser.
Paste the full message body — including links and signatures
Uses 'urgent' — phishing pressure tactic
→ URGENT
Requests sensitive credentials — legitimate services never ask via email
→ confirm your password
Generic greeting — legitimate services address you by name
→ Dear Customer
Look-alike 'paypal' spelling — check the domain character-by-character
→ paypa1
Host: paypa1-secure-verify.tk. This TLD is frequently abused for phishing.
→ https://paypa1-secure-verify.tk/login?token=abc
How to spot phishing — the SLAM method