Phishing guides & references
Practical, plain-language guides on recognising phishing attempts, written alongside the same forensic checks PhishingSonar runs on every email.
How to spot phishing emails
The signals that give a phishing email away: sender mismatches, lookalike domains, urgency tactics and header red flags.
Read guidePhishing email examples
A gallery of real-world phishing lures, reconstructed as mock emails, with a breakdown of exactly what gives each one away.
Read guideHow to report a phishing email
Where to send a suspicious message after you spot it: your security team, Gmail and Outlook report buttons, the impersonated brand, and national bodies like CISA and the NCSC.
Read guideMessage header analyzer
What SPF, DKIM and DMARC actually tell you, how to find headers in Gmail and Outlook, and how to read them for spoofing evidence.
Read guideGot a suspicious email in front of you right now? Run it through the analyzer for a verdict in seconds.