Navigate to Virustotal.com.  Remeber that scans you do on this site will be public.  Be careful to not expose company data.



  • Upload the Attachment:
    • Click on the "Choose file" button on the VirusTotal homepage.
    • Select the suspicious attachment from the phishing email.
    • Click "Confirm upload" to start the analysis.

  • Review the Results:

    • VirusTotal will scan the attachment with multiple antivirus engines.
    • Check the results for any detections of malware or other threats.
    • Look at the detailed report for more information about the threat.

  • Submit the URL:

    • If the phishing email contains suspicious URLs, copy each URL.
    • Click on the "URL" tab on the VirusTotal homepage.
    • Paste the URL into the search bar and click the search icon.

  • Review the Results:

    • VirusTotal will check the URL against various website scanners.
    • Review the safety rating and detailed analysis provided.
    • Look for indicators of phishing or malicious content.