Email & Communication Security API
Analyze email headers, detect spoofing and phishing signals, surface BEC patterns, check brand-domain impersonation, analyze URL redirect chains, inspect attachment risk structures, and compare conversation copies—using caller-supplied EML/headers/attachments plus optional public DNS and SSRF-safe URL follows.
Analyze caller-supplied email headers for routing hops and suspicious inconsistencies (From/Return-Path/Reply-To, auth results, dates). Indicators only—not confirmed malice.
Detect sender spoofing indicators from supplied SPF/DKIM/DMARC authentication results and optional public DNS TXT evidence. Not a confirmed spoof verdict without multi-signal evidence.
Identify phishing indicators in caller-supplied email content and URLs (urgency phrases, lookalike hosts, IP URLs, password forms). Indicators are not confirmed malicious activity.
Detect Business Email Compromise patterns such as payment-change language, executive persona cues, external Reply-To, and lookalike sender domains from supplied mail.
Identify domains resembling supplied company or brand domains using edit distance, hyphen variants, homoglyph folding, and brand-token embedding. Resemblance is not proof of abuse.
Analyze caller-supplied redirect hops or optionally follow public URLs with strict SSRF protections. Never sends email content to external scanners.
Inspect caller-supplied attachment filenames, metadata, and local magic-byte structures for suspicious patterns. No external sandbox or scanner is used.
Identify inconsistencies between supplied email conversation copies (missing messages, body hash mismatches, header field divergence). Export artifacts are distinguished from confirmed tampering.