Free tools
Combines several already-verifiable technical signals (missing SPF, weak DMARC, no HTTPS, very recent domain, name similar to a known brand) into an indicative phishing risk level.
Each signal is a verifiable technical fact (e.g. "no SPF" or "domain registered 10 days ago"). The risk level is indicative and combines how many signals match, not an accusation that the domain is phishing.
Useful to check your own domain before others do, or to quickly assess a suspicious domain received by email, without directly accusing it.
Frequently asked questions
No. It is a combination of weak technical signals, not a direct detection of malicious content or confirmed impersonation.
A domain name within a short edit distance (1-2 characters) of a popular mail provider, a typical typosquatting pattern.