SCW SHIELD

GoFish

Phishing & Smishing Detection Engine

Got a sus link or sketchy SMS? Paste it here. GoFish runs 25+ heuristic checks β€” URL manipulation, brand impersonation, urgency patterns, and Israeli scam templates β€” all client-side, zero data sent anywhere.

Your data stays local: GoFish runs entirely in your browser. Nothing is sent to any server β€” ever. Perfect for checking links you're not sure about.
1
Paste the suspectA URL, an SMS, a WhatsApp message β€” anything with a link
2
Instant analysis25+ checks including URL tricks, brand spoofing, Hebrew/English urgency patterns
3
Verdict + proofRisk score, every red flag explained, and external verification links

SCAN  Paste URL or SMS


INFO  What GoFish Detects

URL Manipulation

Suspicious TLDs, URL shorteners, IP-based URLs, excessive subdomains, homograph attacks, encoded characters

Brand Impersonation

Lookalike domains mimicking banks, tech companies, payment services, delivery companies, and government agencies

Urgency & Pressure

Threatening language, account suspension claims, "act now" pressure, time-limited offers, scare tactics

SMS Patterns

Smishing templates, delivery scams, verification code lures, prize/lottery messages, Hebrew phishing patterns


Think before you click.

GoFish catches phishing patterns that bypass spam filters. It analyzes entirely in your browser β€” zero data leaves your device. For deeper investigation, use the external verification links provided with each result.