Question 1

How can I tell if an email is phishing?

Accepted Answer

Common signs are a sender address or domain that does not match the organization it claims to be, failed SPF, DKIM or DMARC checks, links whose real destination differs from their text, unexpected attachments, and pressure to act fast on a payment, password or login. To check a specific message, upload it or paste its raw source into AntiBait. It runs these checks for you and lists the signals it found.

Question 2

How does AntiBait detect phishing emails?

Accepted Answer

AntiBait checks the message in stages. Deterministic checks come first: SPF, DKIM and DMARC results and the routing path, links, domains, IP addresses and attachment hashes looked up as indicators, and whether the brand the message speaks for matches the domain that sent it. Some cases are settled there, such as a match on a verified threat list or authenticated mail from a brand's own domain. Otherwise an AI model reads the message together with those findings, a second pass reviews the verdict when it disagrees with the evidence, and brand impersonation that asks for a login or a payment is never shown as safe. The verdict lists the signals behind it.

Question 3

Can AI detect phishing emails?

Accepted Answer

Yes, and it helps most with messages that technical checks alone miss. AntiBait's AI model reads the whole message for intent, impersonation and pressure tactics, with the results of the header, authentication, link and sender-identity checks in front of it. When its verdict disagrees with that evidence, a second pass reviews it. The verdict lists the evidence so you can follow the reasoning.

Question 4

How do I analyze an email with AntiBait?

Accepted Answer

Copy the raw source of the email and paste it into the analyzer, or upload an .eml or .msg file. Most clients offer this as "Show original", "View source" or "Download message". The report is usually ready within 30 seconds.

Question 5

Is AntiBait free to use?

Accepted Answer

Yes. Without an account you can run up to 3 scans a day. A free account includes 10 analyses a day, up to 100 a month, and keeps your history. Pro costs $9.99 a month: it checks every email you open automatically, covers up to 3 people at home and sends a weekly report. You can try it for 7 days without a card.

Question 6

What are SPF, DKIM and DMARC?

Accepted Answer

They are email authentication standards. SPF lists the servers allowed to send mail for a domain, DKIM adds a signature that proves the message was not altered, and DMARC tells receiving servers what to do when those checks fail. A failed result is a strong phishing signal, especially when the sender claims to be a bank or a well-known brand. A missing result is not, on its own: forwarded or exported messages often lose the headers that record it. A pass is no proof either, because it shows which domain sent the mail, not that the domain belongs to the brand the mail names. AntiBait reads these results from the message headers and checks them against the sending domain.

Question 7

What's the difference between basic and advanced analysis?

Accepted Answer

Basic analysis provides essential phishing detection using our core algorithms. Advanced analysis includes AI-powered content scanning, comprehensive header analysis, link verification, sender reputation checks, domain analysis, behavioral pattern detection, and detailed threat reports with actionable recommendations.

Question 8

What email formats and providers do you support?

Accepted Answer

We support all standard email formats including .eml and .msg files, raw email source, and email headers from major providers like Gmail, Outlook, Yahoo, Apple Mail, and corporate email systems. You can paste the source directly or upload .eml/.msg files for analysis.

Question 9

How accurate is AntiBait's detection?

Accepted Answer

No detector is perfect. On our internal evaluation set of 127 labeled emails, the current pipeline classified 97.6% correctly, with no missed phishing or malware and no false alarms on legitimate mail. The set is small and built by us, so read that as a check, not a guarantee. Every verdict also lists the signals that produced it, so you can judge the result yourself. If a result looks wrong, report it from the analysis.

Question 10

Do you store or access my email content?

Accepted Answer

No. An email you scan is analyzed and discarded once the verdict is returned. The only email we keep is one you choose to attach to a feedback report, and only until our team has reviewed it. Signed-in analyses keep the sender, recipient, subject and verdict in your history. The privacy policy has the details.

Question 11

Can I use AntiBait for my business or organization?

Accepted Answer

Yes. The Business plan adds a team workspace for up to 5 people with shared history, campaigns and indicator search, a team dashboard, up to 5 forwarding addresses and higher allowances. For on-premise deployment, custom integrations or volume pricing, contact sales@antibait.io.

Question 12

What should I do if AntiBait flags a legitimate email as suspicious?

Accepted Answer

False positives can happen. Report the result from the analysis page, or email security@antibait.io with the analysis ID. Reports help us tune the checks.

Question 13

What should I do if I clicked a link in a phishing email?

Accepted Answer

Do not enter anything else on the page. If you typed a password, change it everywhere you use it and turn on two-factor authentication. If you opened an attachment, disconnect the device from the network and run a malware scan. Tell your bank if you shared payment details, and report the message to your IT or security team. You can analyze the email in AntiBait to see which links and indicators it contained.

Question 14

Do you offer an API for developers?

Accepted Answer

Yes. The REST API is included in Pro (500 requests a month) and Business (2,500 a month). The documentation covers authentication, endpoints and request examples.

Question 15

How quickly do you detect new phishing campaigns?

Accepted Answer

New campaigns are often caught by their structure and wording before any indicator is known, because the AI analysis does not depend on block lists. Indicators found in analyzed mail are added to the shared IOC database so later scans can match them.

Question 16

Can AntiBait detect zero-day phishing attacks?

Accepted Answer

Often, yes. The AI analysis looks at intent and wording, and the header checks look at how the message was sent, so neither depends on having seen the attack before. No detector catches everything, so treat the verdict as one input to your decision.

Question 17

What are the usage limits?

Accepted Answer

Without an account: up to 3 scans a day. Free account: 10 analyses a day, up to 100 a month, once you confirm your email (3 a day until then). Pro: 500 manual analyses, 2,000 automatic checks and 50 deep checks a month, shared with your household. Business: 2,500 analyses, 10,000 automatic checks and 300 deep checks a month. Enterprise limits are agreed per contract.

Question 18

How do I report a security issue or false negative?

Accepted Answer

Email security@antibait.io with details of the vulnerability, or with the analysis ID of an email that should have been flagged. We respond to security reports within 4 hours.