DetectPhish — Phishing Triage & Dynamic Sandbox Console

DetectPhish

Phishing Triage & Threat Intelligence Console

Invalid credentials

Username

Password

DetectPhish

Threat Triage & Google SMTP Relay

[Output truncated. Use offset and limit to read another range.]

Integrations

Application

ANY.RUN API Configuration

API Key

Generate an API key in your ANY.RUN Account → Profile → API and Limits. Stored securely in browser storage.

Environment OS

Sandbox a URL or DNS Name

Submit a suspicious URL, domain, or hostname directly to ANY.RUN for dynamic detonation — no need to run a full case through the triage flow first. One entry per line. Bare domains (e.g. evil-domain.net) are submitted as http://evil-domain.net.

URLs / Domains

Environment OS

VirusTotal API Configuration

API Key

Generate an API key in your VirusTotal Account → API Key. Stored locally in browser storage.

VirusTotal Lookup / Scan

Check a URL, domain, IP address, or file hash (MD5/SHA1/SHA256) against VirusTotal — no need to run a full case through the triage flow first. One entry per line; type is auto-detected. URLs are submitted for a fresh scan; domains, IPs, and hashes are looked up directly.

URLs / Domains / IPs / File Hashes

Inbound Email-In & Google SMTP Relay

To enable users to email directly into DetectPhish and have automated recommendation reports dispatched via Google SMTP servers, deploy the Google Apps Script Web App below and paste your endpoint URL here.

Google Apps Script / Webhook Endpoint URL

Automatic Google SMTP Outbound Relay

Use Google SMTP (GmailApp) to send triage feedback directly back to the submitter

View Google Apps Script Code (For Google Workspace / Gmail setup)

Create a Google Apps Script project, paste this code, deploy as a Web App (Execute as: Me, Who has access: Anyone), and paste the resulting URL above:

function doPost(e) {
  var data = JSON.parse(e.postData.contents);
  var recipient = data.submitterEmail;
  var report = data.reportText;
  var reportHtml = data.reportHtml;
  
  if (recipient && report) {
    GmailApp.sendEmail(recipient, "DetectPhish Security Analysis Report", report, {
      name: "DetectPhish Triage Bot",
      htmlBody: reportHtml || report
    });
  }
  return ContentService.createTextOutput(JSON.stringify({status: "success"})).setMimeType(ContentService.MimeType.JSON);
}