This project focuses on identifying, analyzing, and classifying phishing emails using structured email investigation techniques.
The goal is to:
- Detect phishing indicators
- Analyze email headers
- Inspect suspicious domains safely
- Classify risk severity
- Provide prevention guidelines
- Google Admin Toolbox – Messageheader
- Browser Developer Tools
- Safe URL Inspection Techniques
- MS Word / PDF Documentation
1️⃣ Fake Bank Account Verification
2️⃣ Fake Google Security Alert
3️⃣ Fake PayPal Account Limitation
- SPF authentication failure
- DKIM signature failure
- DMARC policy failure
- Look-alike domains
- Urgency-based language
- Credential harvesting links
- Generic greetings
All three emails were classified as:
High Risk – Phishing
Reason:
- Authentication failures
- Brand impersonation
- Malicious login redirection
✔ Verify sender domain carefully
✔ Type official URLs manually
✔ Enable Multi-Factor Authentication (MFA)
✔ Report suspicious emails immediately
❌ Do not click suspicious links
❌ Do not share passwords or OTP
❌ Do not trust urgent financial threats
- Professional Phishing Analysis Report (PDF)
- Header Analysis Screenshots
- Risk Classification Documentation
Program: Future Interns – Cyber Security Track (CS)
Task Number: 02
Domain: Email Security & Phishing Detection
This project demonstrates structured phishing investigation and security awareness reporting skills.