Got a suspicious email, a sketchy link, or a file you do not trust? These tools run free analyses using public threat intelligence. The header analyzer runs entirely in your browser: nothing you paste ever leaves your device.
Analyze email headers
In Gmail: open the message, click the three dots, then "Show original," and copy everything. In Outlook: File, Properties, copy "Internet headers."
Check a file hash
Paste an MD5, SHA1, or SHA256 hash. Never upload the file itself. Checked against VirusTotal and MalwareBazaar, free public malware databases.
Check a URL
Paste the full suspicious link. Checked against urlscan.io and URLhaus to see if it is a known-malicious site.
Report something suspicious
Build a clean report you can forward to CISA at report@cisa.gov, your IT team, or law enforcement. Nothing is submitted automatically.
Check if your email was in a breach
Enter your email at Have I Been Pwned to see if it appears in a known data breach. Enter your email only, never your password. If it shows up, change that password everywhere you reused it and turn on two-step verification. A clean result does not mean you are safe, it only means that email was not in a breach this service knows about.
Check on Have I Been PwnedGet new tools and intel
A note on what these tools can and cannot do
These checks use respected public threat intel feeds. A clean result does not mean something is safe: new phishing sites and fresh malware appear every hour. A flagged result is a strong signal to stop and investigate. When in doubt, do not click, do not open attachments, and verify through a separate trusted channel.