Cactus

Check if an email looks like phishing

Paste the body of a suspicious email. Cactus will scan the wording for common phishing patterns (urgency, threats, credential requests) and analyze each link it finds.

Paste raw email headers (optional, but improves accuracy)

Raw headers let Cactus check SPF / DKIM / DMARC results and spot mismatches between the visible From address and the Reply-To or Return-Path. Most clients have a "Show original" or "View source" option that reveals them.

Frequently asked questions

How can I tell if an email is a phishing scam?

Look for urgency, a mismatched sender address, generic greetings, and links that don't match the company. Paste the email here and we'll analyze the links, sender, and wording in plain language.

Is it safe to open a suspicious email?

Opening an email is usually safe; the danger is clicking links or opening attachments. Check those first - and never enter a password from an email link.

What should I do with a phishing email?

Don't click anything. Verify through the company's official site, report it to your provider or IT team, then delete it.

How our checks work