·emails analyzed
·malicious domains
·community reports

Analyze a suspected phish

Paste an email's raw source (or upload an .eml) and PhishStack returns a verdict, a confidence score, and the signals behind it.

Tip: include full headers to verify SPF, DKIM and DMARC.

Recent detections

Confirmed phishing URLs from the community, newest first.

View all
Threat URL Detected Confidence
Loading threat feed

What is PhishStack?

PhishStack is an email threat detector. A fine-tuned BERT classifier reads an email's subject, body and headers, then returns a verdict with a confidence score and the signals behind it. It also parses SPF, DKIM and DMARC results and scrubs personal data before anything is stored.

What is phishing?

Phishing is an attempt to trick you into handing over credentials, money or sensitive data, usually by impersonating a brand or person you trust. Common signs include urgency, generic greetings, mismatched links and requests for personal information. When in doubt, do not click. Analyze it here first.