0
0
0
0
0.0
Email Security Inspection Console
Paste an email, upload a sample (.txt / .eml), or test synthetic threat templates.
Email Forensics Input
Ready for Security Assessment
Enter email details or select a synthetic test sample on the left to generate real-time threat scores, forensic findings, and defensive guidance.
Security Operations Center (SOC) Analytics
Real-time telemetry, threat indicators distribution, and detection patterns.
1. Threat Classification Breakdown
2. Phishing vs. Legitimate Ratio
3. Top Detected Phishing Indicators
4. Risk Score Distribution Bands
5. Detection Trend Timeline
6. Most Common Suspicious Keywords
Security Awareness & Interactive Defense Training
Actionable micro-lessons, the 10-point spotting guide, safe simulation templates, and the "Before You Click" checklist.
🛡️ "How to Spot a Phishing Email" — The 10 Fundamental Signals
Train your instincts to evaluate incoming messages against these 10 industry indicators:
Check the domain following '@'. Attackers often use lookalike domains (e.g. support@paypa1.com).
Watch for typosquatting (substituting '0' for 'o', or 'rn' for 'm').
Demands to act within "2 hours" or "24 hours" are designed to bypass critical thinking.
Hover to verify. Look out for raw numerical IP addresses or shortened URLs hiding true hosts.
Legitimate organizations never ask you to enter passwords, PINs, or 2FA codes from email links.
Scrutinize double extensions (e.g. Invoice.pdf.exe) and macro files (.docm).
Salutations like "Dear Customer" or "Dear Member" suggest automated spray-and-pray attacks.
Demands for gift cards, cryptocurrency, or sudden changes to supplier bank routing numbers.
Threats of account deletion, immediate arrest, or lawsuits are coercion techniques.
Ask yourself: Was I expecting this delivery? Did I enter a lottery? Verify out-of-band.
✅ "Before You Click" Self-Defense Checklist
Review every incoming communication against these 8 defensive criteria before interacting:
🎓 Bite-Sized Cybersecurity Micro-Lessons
Lesson 1: The Art of Hovering
Attackers frequently format email text to display a benign URL (e.g., https://mybank.com) while the underlying HTML hyperlink (href) actually points to a deceptive server (e.g., http://198.51.100.10/login).
Actual Destination: http://auth.security-update.invalid.test/login
Rule: Always pause and hover your mouse cursor over hyperlinks to preview the real destination in the browser's lower-left corner before clicking.
Lesson 2: Display Name vs. Domain Address
Email protocols allow the sender to configure an arbitrary "Display Name" that appears prominently in email clients, while hiding the true sending mailbox.
Sending Mailbox: helpdesk-update@compromised-host.invalid.test
Rule: Always expand the sender header to inspect the actual domain following the @ symbol.
Lesson 3: Deceptive Double Extensions
Because default Windows configurations hide known file extensions, attackers name malicious binaries like Quarterly_Invoice.pdf.exe. In an unsuspecting inbox, this appears simply as Quarterly_Invoice.pdf with a document icon.
Rule: Never open unexpected executable scripts (.exe, .vbs, .scr, .bat, .js). Configure your operating system to always display file extensions.
Lesson 4: The HTTPS Padlock Myth
A green padlock or https:// merely proves that communication between your browser and the website is encrypted. It does NOT verify who owns the website or whether they are legitimate.
Rule: Treat encryption as data privacy in transit, never as an endorsement of business identity or security.
Lesson 5: Safe Phishing Simulation Templates
Educational templates using merge tags for security training exercises:
Subject: Action Required: {company} Single-Sign-On Password Expires in 2 Hours
Body: Hi {name}, your corporate credentials will expire today. Re-authenticate at: http://auth-portal.invalid.test
Subject: Quick Task for {company} Executive Board
Body: {name}, are you at your desk? I need an urgent purchase of Apple gift cards right now. Send receipt.
Lesson 2: Display Name vs. Domain Address
Email protocols allow the sender to configure an arbitrary "Display Name" that appears prominently in email clients, while hiding the true sending mailbox.
Sending Mailbox: helpdesk-update@compromised-host.invalid.test
Rule: Always expand the sender header to inspect the actual domain following the @ symbol.
Lesson 3: Deceptive Double Extensions
Because default Windows configurations hide known file extensions, attackers name malicious binaries like Quarterly_Invoice.pdf.exe. In an unsuspecting inbox, this appears simply as Quarterly_Invoice.pdf with a document icon.
Rule: Never open unexpected executable scripts (.exe, .vbs, .scr, .bat, .js). Configure your operating system to always display file extensions.
Lesson 4: The HTTPS Padlock Myth
A green padlock or https:// merely proves that communication between your browser and the website is encrypted. It does NOT verify who owns the website or whether they are legitimate.
Rule: Treat encryption as data privacy in transit, never as an endorsement of business identity or security.
Forensic Analysis History & Audit Trail
Search, filter, inspect, and export previously scanned email records.
| ID | Timestamp | Sender Domain | Subject Line | Threat Score | Classification | Actions |
|---|---|---|---|---|---|---|
| Loading forensic history... | ||||||