MSRXTools / Phishing & email
Phishing e-mail checker
Paste a whole suspicious e-mail or drop an .eml: who really sent it, what the words ask for, where every link goes (even when the text lies), and what the attachments are.
Runs in your browser
Loading tool…
Good to know
- Judge the sender by the authentication results and the Return-Path, not the display name, which anyone can set to “PayPal”.
- A link whose text says one site while it goes to another is the single most reliable tell in a phishing e-mail.
- A real bank, courier or tax office does not ask for an OTP, a password or an install. When unsure, type the company's address yourself instead of using any link.
Related tools
Email header analyser
Paste a suspicious email's headers: see who really sent it, whether SPF, DKIM and DMARC passed, the relay path, and the spoofing tells.Email spoofing check (SPF, DMARC, CAA)
Can anyone send mail as your domain? Reads SPF, DMARC and CAA records and explains each in plain words.Scam message checker
Paste an SMS, WhatsApp message, email or call script. It checks for the scripts used in India (fake KYC, “digital arrest”, UPI refunds, task jobs) and can ask Jev for an AI second opinion.Website vulnerability scanner
Paste a URL. Get a SWOT security report scored out of 10: HTTPS, TLS, headers, cookies, content, DNS and email, with fixes.
Paste a suspicious email's headers: see who really sent it, whether SPF, DKIM and DMARC passed, the relay path, and the spoofing tells.Email spoofing check (SPF, DMARC, CAA)
Can anyone send mail as your domain? Reads SPF, DMARC and CAA records and explains each in plain words.Scam message checker
Paste an SMS, WhatsApp message, email or call script. It checks for the scripts used in India (fake KYC, “digital arrest”, UPI refunds, task jobs) and can ask Jev for an AI second opinion.Website vulnerability scanner
Paste a URL. Get a SWOT security report scored out of 10: HTTPS, TLS, headers, cookies, content, DNS and email, with fixes.