Risk|TrackerRisk|Tracker
Check a suspicious emailbefore it costs you.
Paste the sender, see the domain on an interactive canvas, and get a risk assessment with phishing indicators—plus reports when you need to tell someone else.
Educational risk-check tool — not a mailbox scanner or a guarantee against phishing.
Risk check
scam@fake-bank.co
A risk call you can explain — not a gut check.
Risk
High
Confidence
91%
- 01
Domain lookalike.
fake-bank.co
- 02
Mail path is off.
MX → unfamiliar relay
- 03
Urgency language.
payment hold · act now
Domain lookalike — that is the story you can take to staff or a provider.
Why it exists
Phishing is messy. Your notes shouldn’t be.
Risk|Tracker is one place for the email, the domain map, the risk call, and the write-up.
- 01Suspicious email
You received something odd.
A lookalike sender, urgent ask, or unfamiliar link. You need more than a gut check before you click or forward it.
- 02DNS + WHOIS
You need domain evidence.
Who owns the domain, how mail routes, and what records look abnormal—without hopping between WHOIS sites and DNS digs.
- 03Risk + reports
You need a clear call.
Risk level, phishing indicators, and something you can share with staff, your company, or a provider—without rewriting the story three times.
Try it
Start with any sender address.
The canvas does the rest.
No setup beyond opening the app. Add a screenshot or paste the body if you have them—then follow the graph.
01
Open a risk check.
Use the button below or Check email in the header.
02
Enter the sender.
Optionally paste the email or upload a screenshot.
03
Read risk on the canvas.
Explore domain nodes, ask follow-ups, save or report.
FAQ
Checking suspicious email, answered.
Straight answers for people who need a phishing risk check—not another inbox product pitch.
How do I check if a suspicious email is phishing?
Start with the sender address and domain. Look up how mail routes (MX), what hosts the domain resolves to, and whether the message shows common phishing indicators such as urgency, lookalike brands, or mismatched links. Risk|Tracker turns that into a structured risk check with a risk level you can explain.
What does Risk|Tracker analyze?
Risk|Tracker maps the sender domain on an interactive canvas, enriches DNS and related signals, surfaces phishing indicators, and can produce audience-ready reports. It is an educational risk-check tool—not a mailbox scanner.
Is Risk|Tracker a guarantee that an email is safe or malicious?
No. Phishing detection is probabilistic. Use the risk call as decision support alongside your organization’s policies—not as a sole authority.
Do I need to install software or connect my inbox?
No. Open the app, enter a sender address, and optionally paste the message body or upload a screenshot. Nothing connects to your mailbox.
When should I save a check to the Threat catalog?
Save high or critical risk checks so shared infrastructure fingerprints (such as MX or IP signals) can help spot related lookalikes later.
Want the longer walkthrough? Read the phishing email check guide.
Next
Check the next suspicious email.
Start with the sender address. Leave with a risk assessment you can explain.