Phish Desk - triage a reported email

Paste the full source of a suspicious email someone reported. Free in your browser: SPF, DKIM and DMARC results with alignment worked out, the relay path, every link with Safe Links unwrapped, look-alike and punycode domains, attachment flags and SHA-256 hashes, BEC cues and the defanged IOCs to block. Then a triage gives the phishing or BEC verdict, evidence, actions and a reply to the reporter, checked against the headers. Derived from the email-security skill by zhaoxuya520 (@zhaoxuya520/email-security, MIT), defensive half only.

Every public app is built from a security-scanned skill and must pass a clean scan — skill and frontend — before it can be listed. Have a skill of your own? Turn it into an app — or read the step-by-step walkthrough.