Do not click the message links
Save the email first, then scan it. The goal is to preserve the original evidence while avoiding login pages, downloads, and tracking links inside the message.
Use a dedicated upload flow
PhishAnalyze reads the .eml file and separates verdict, evidence, failed checks, skipped checks, and practical next steps so the result is easier to review.
Treat clean results as context, not permission
A clean scan reduces concern, but it does not prove the email is safe forever. For payments, credentials, or urgent requests, verify through a trusted channel.