An application or a plugin to Email client application such as Outlook or Thunderbird is described which automatically analyzes and detects Phishing emails. The application reads emails in an email client that an end user is using to access his/her emails. The application views source code of the email with all email headers, analyzes signatures, SMTP logs, and all traces of email origin.