PhishNode

PhishNode turns every analyst's webmail into a phishing-reporting cockpit. WHAT IT DOES When you open a suspicious email in any supported webmail, a "Report to PhishNode" button appears in the message toolbar. One click sends the raw .eml to your organisation's PhishNode tenant for analysis. Within a few seconds, a toast shows the verdict (PHISHING / SUSPICIOUS / CLEAN / SPAM), the threat score, and the count of IOC matches against your tenant library. SUPPORTED WEBMAILS •Works seamlessly across major webmail interfaces, providing native reporting capabilities without requiring complex mail server integrations or dedicated client add-ins. HOW IT WORKS The extension uses the webmail's OWN raw-message endpoint with the session cookies you already have. No OAuth dance, no extra credentials. For emails over 3 MB the extension transparently uploads to a signed Supabase Storage URL. PRIVACY • Email content is read ONLY when you click Report — never in the background. • No tracking of which webmails you visit, no URL logging. • Your PhishNode endpoint and API key are stored in chrome.storage.sync and never transmitted to anyone other than your own configured tenant.