Documentation

1. Create your account

Visit phishivox.com/signup and enter your email and a strong password. You'll receive a verification email — click the link to activate your account.

2. Verify your email

Check your inbox (and spam folder) for the verification email from Phishivox. Click the link to confirm your address. You won't be able to scan emails until your account is verified.

3. Log in

Head to phishivox.com/login, enter your credentials, and you'll land on your Dashboard.

4. Start scanning

Navigate to Scan Email from the top navigation. Free users get 10 scans per month with 1 AI analysis. Upgrade to Professional for 500 scans and 100 AI analyses per month.

Your dashboard is the central hub showing your scanning activity and account status.

What you'll see

• Monthly Stats — Total scans, phishing detected, suspicious, spam, and safe emails this month.
• Risk Level — An overall risk assessment (Low, Medium, High, Critical) based on the ratio of threats in your scans.
• Scan Quota — A progress bar showing how many scans you've used out of your monthly limit, plus any bonus scans.
• AI Analysis Quota — A separate bar showing AI-powered analyses used vs. your limit.
• Recent Scans — Your last 5 scan results with verdict badges (Safe, Suspicious, Phishing, Spam).
• Connected Mailboxes — Quick view of your Gmail and Microsoft 365 connections with connect/disconnect buttons.

Phishivox provides three ways to scan emails. Choose the one that fits your workflow.

Method 1: Upload .eml file (recommended)

The easiest and most accurate method. Download the suspicious email as a .eml file from your email client, then upload it.

• Gmail: Open the email → click the three dots (More) → "Download message"
• Outlook: Drag the email from your inbox to your desktop, or File → Save As → .eml
• Apple Mail: File → Save As → choose "Raw Message Source"
• Thunderbird: File → Save As → File (.eml)

Then go to Scan Email → Upload .eml, drag your file into the upload area (or click to browse), and hit Scan.

Method 2: Mailbox scan

Connect your Gmail or Microsoft 365 account (see Connecting Mailboxes), then browse your folders directly within Phishivox. Select one or more emails and click Scan.

• Browse all folders (Inbox, Spam, Sent, custom labels)
• Select multiple emails for batch scanning
• Results appear instantly in the right panel

Method 3: Manual entry

For quick checks when you have specific email details. Fill in the sender address, subject, email body, and optionally headers. Useful for testing or when you only have partial email information.

Connect your email accounts to scan directly from your inbox without downloading files.

Gmail

1. Go to your Dashboard and find the "Connected Mailboxes" section.
2. Click Connect next to Gmail.
3. Sign in with your Google account and grant read-only access.
4. You'll be redirected back to Phishivox with a success message.

Microsoft 365

1. Go to your Dashboard and find the "Connected Mailboxes" section.
2. Click Connect next to Microsoft 365.
3. Sign in with your Microsoft account and grant read-only mail access.
4. You'll be redirected back with a success message.

Every scan produces a detailed report with a verdict, confidence score, and breakdown of what was detected.

Verdicts

5-Layer Detection Pipeline

Phishivox analyzes every email through five independent detection layers:

1. Rule Engine — Pattern matching for sender spoofing, lookalike domains, urgency language, and known phishing tactics.
2. URL Analyzer — Inspects every link for blocklisted domains, suspicious TLDs, IP-based URLs, and redirect tricks.
3. Header Forensics — Checks SPF, DKIM, and DMARC authentication results plus routing anomalies.
4. ML Classifier — A trained machine learning model that evaluates 12+ structural features of the email.
5. AI Analysis — Advanced AI performs deep language analysis, detects brand impersonation, and provides human-readable explanations. Available on Professional and Enterprise plans (limited on Free).

Confidence Score

The confidence score (0–100%) indicates how certain the system is about the verdict. Higher confidence means more detection layers agreed on the assessment. A low-confidence phishing verdict means some layers flagged the email while others didn't — worth investigating.

AI Findings & Recommendations

When AI analysis is available, you'll see structured bullet-point findings explaining exactly what the AI detected, along with actionable recommendations for what to do next.

Upgraded from Free to Professional? You can rescan any previously analyzed email to get the full AI-powered analysis without re-uploading it.

How to rescan

1. Go to your Dashboard and find the email in your recent scans.
2. Click on the scan to open the detailed report.
3. Click the Rescan button (amber colored).
4. The email is re-analyzed with your current plan's capabilities — including AI analysis if you're on Professional.

Free (Community)

• 10 scans per month
• 1 AI analysis per month
• 7-day scan history
• All 5 detection layers
• Upload .eml, manual entry, mailbox scan

Professional

• 500 scans per month
• 100 AI analyses per month
• 90-day scan history
• Priority support
• Rs. 799/month or Rs. 7,999/year (save 17%)
• $9.99/month or $99.99/year internationally

Enterprise

• 10,000+ scans per month
• Organization-level admin dashboard
• Team member management and shared scan pool
• 1-year scan history
• Custom pricing — Contact us

Upgrading to Professional

1. Go to Upgrade from the top navigation.
2. Choose Monthly or Yearly.
3. Enter a coupon code if you have one (click Apply to validate).
4. Complete payment via Razorpay (cards, UPI, net banking).
5. Your account is instantly upgraded — start scanning with AI analysis.

Buying extra scan packs

Professional and Enterprise users can purchase additional scans that never expire and carry over month-to-month:

Bonus scans carry over month-to-month and are consumed only after your tier's base limit is exhausted.

Coupon codes

Enter a coupon code on the Upgrade page before checkout. Coupons may apply to monthly plans, yearly plans, or both — the system validates automatically. Each coupon can only be used once per account.

Enterprise customers get a dedicated organization space where admins can manage team members and view company-wide security analytics.

Organization Dashboard

Accessible from the Organization link in the navigation (visible to org admins only). Shows:

• Total members and shared scan pool usage
• Threat breakdown (phishing, suspicious, spam, safe) for the entire organization
• Top 5 most-targeted users
• 30-day scan activity timeline chart
• Overall risk level for the organization

Managing team members

From Organization → Members, org admins can:

• Invite members by email with a role (Admin or Member)
• Change roles between Admin and Member
• Remove members from the organization (their account is preserved but unlinked)
• View each member's scan count for the current month

Accepting an invitation

When invited, team members receive an invitation link. Clicking it while logged in joins them to the organization automatically.

Organization settings

Org admins can update the organization name, email domain (for auto-provisioning), and logo. Plan limits (max users, max scans, max AI scans) are managed by the Phishivox super admin.

Theme toggle

Click the sun/moon icon in the header to switch between dark and light mode. Your preference is saved locally.

Disconnecting mailboxes

Go to your Dashboard, find the mailbox under "Connected Mailboxes," and click Disconnect. This immediately revokes access — Phishivox can no longer read your emails.

Cancelling your subscription

Go to the Upgrade page. If you're on a paid plan, you'll see subscription management options. Cancellation takes effect at the end of your current billing period — you retain access until then.

Need help?

Contact us at support@phishivox.com for any account-related issues.

Gmail keeps asking me to reconnect

This usually means the OAuth token expired and couldn't be refreshed. Go to Dashboard, disconnect Gmail, then reconnect. Make sure you grant all requested permissions during the OAuth consent screen.

Microsoft 365 shows "Network error"

Ensure you're connecting with the correct Microsoft account. If you use a Gmail address for your Microsoft account, the mailbox will be empty because your emails live in Gmail, not Microsoft's servers. Use the Gmail connector instead.

M365 mailbox shows "0 emails"

If your email provider is Gmail but you signed in with your Microsoft account (using the same email), the Microsoft mailbox will be empty. Disconnect M365 and connect via the Gmail connector.

Scan quota exceeded

You've used all your monthly scans. Options: wait for the next month's reset, purchase a scan pack (Professional+), or upgrade to a higher tier.

"Please verify your email" error

You need to verify your email before using the app. Check your inbox for the verification link. If you can't find it, check your spam folder.

AI analysis not appearing

Free tier users get 1 AI analysis per month. If you've used it, subsequent scans run without AI until next month. Upgrade to Professional for 100 AI analyses per month.

Payment failed

If the Razorpay checkout fails or is dismissed, no charge is made. Try again — ensure your payment method is valid and has sufficient funds. Contact support@phishivox.com if the issue persists.

Scan results seem inaccurate

The 5-layer detection pipeline is highly accurate, but no system is 100% perfect. If a scan result seems wrong, try rescanning the email. If you're on the Free tier, upgrading to Professional enables AI analysis, which significantly improves accuracy for sophisticated phishing attempts.