EmailSpecter — Email Security Inspector

Analyze an Email

Drag & drop your .eml file here

or click to browse

Maximum file size: 10MB

I agree to the Terms of Service and confirm this analysis is for legitimate security research purposes.

Currently supports .eml files. For Outlook .msg files, open the email in Outlook and use File → Save As → select "Outlook Message Format - Unicode (*.msg)" then re-save as ".eml" format, or forward the email to yourself and save as .eml.

SiteSpecter has recurring monthly costs to keep running. If you find this tool valuable, please consider supporting the project.

Support This Project

What is EmailSpecter?

EmailSpecter is an email security analysis tool that inspects .eml files for phishing indicators, malicious attachments, sender impersonation, and other email-based threats. It processes emails entirely in memory without storing any content on the server.

Key Features

Risk Score: Consolidated 0-100 risk score with breakdown across 8 security categories
Authentication Analysis: SPF, DKIM, and DMARC verification results
Sender Anomalies: Detection of reply-to mismatches, display name spoofing, brand impersonation, and excessive subdomains
URL & Link Analysis: Display/href mismatches, URL shorteners, suspicious TLDs, IP-based URLs, and free hosting platform abuse
Attachment Analysis: Dangerous file types, double extension tricks, macro detection, password-protected archives, and content-based checks
Content Indicators: Urgency language, credential requests, fake trust messaging, subject line analysis, and hidden content detection
Sender Domain Investigation: Email security records (SPF/DKIM/DMARC), WHOIS/RDAP registration data, domain age, and brand similarity
Linked Domain Analysis: Security and registration checks for all domains found in the email body
Gateway URL Unwrapping: Automatic detection and unwrapping of Proofpoint, Microsoft Safe Links, Barracuda, and other email security gateway URLs

How to Get a .eml File

Gmail: Open the email → click the three dots (⋮) → Show original → Download Original
Outlook (Desktop): Open the email → File → Save As → change type to "Outlook Message Format - Unicode (*.msg)", then re-save or forward as .eml
Outlook (Web): Open the email → click the three dots (…) → View message source → copy and save as .eml
Apple Mail: Select the email → File → Save As → choose Raw Message Source
Thunderbird: Right-click the email → Save As → saves as .eml by default

Intended Uses

EmailSpecter is designed for legitimate security purposes, including:

Investigating suspicious emails: Safely analyze phishing emails without clicking links or opening attachments
Incident response: Quickly triage reported phishing emails as part of security workflows
Security awareness training: Demonstrate email-based attack techniques in educational settings
Threat research: Analyze attack patterns, sender infrastructure, and phishing campaigns

Important Guidelines & Disclaimers

Automated analysis: Results are based on pattern matching, header inspection, and DNS lookups — not a guarantee of malicious or benign intent
Context matters: Many indicators (like reply-to mismatches or URL shorteners) are common in legitimate emails — evaluate findings holistically
Use additional tools: Always consult your email provider's security features, email security gateway reports, and organizational policies
No content storage: Email files are processed in memory only and never stored on the server
Attachment metadata only: Only filenames, sizes, and hashes are captured — attachment content is never stored

Getting Started

Export a suspicious email as a .eml file from your email client
Drag and drop the file onto the upload area, or click to browse
Check the Terms of Service agreement box
Click Analyze to run the security analysis
Review the results across the various tabs — start with the Overview for a risk summary
Use the Inspect buttons to analyze linked domains on SiteSpecter

For full legal terms, please review the Terms of Service & Privacy Policy.

Analyze an Email

AI-Powered Summary