// read before you click
Something about
this email feels off.
Paste the email's text (or the HTML source, if you have it) and Delint Mail checks it against common phishing patterns — urgency language, mismatched links, lookalike domains, generic greetings. It's a heuristic pass, not a verdict.
What it looks for
- Urgency and threat language — "act now," "account suspended," "verify immediately"
- Mismatched links — link text showing one domain while the actual href points somewhere else
- Lookalike domains — near-misses of well-known brand names, like paypa1.com or micros0ft.com
- Generic greetings — "Dear Customer" or "Dear User" instead of a real name
- Shouting subject lines — excessive capitalization or exclamation marks
Questions
Does this replace real email security software?
No. It's a quick, free second opinion using visible text patterns. Real phishing detection also checks sender authentication (SPF/DKIM/DMARC), sending infrastructure, and reputation data that only your mail provider can see.
Why paste HTML source instead of just the visible text?
The mismatched-link check needs the actual href behind a link, which only appears in the HTML source. Most email clients have a "view source" or "show original" option in the message menu.
Is anything uploaded?
No. Everything is scanned in your browser with JavaScript. The email text never leaves your device.