Phishing SOC Email Analyzer
Fully client-side analysis for .eml files. No server upload.
Built for phishing triage and incident response workflows.
Security mode: untrusted email content is parsed and rendered as text only. No active HTML execution.
Input & Settings
Select an email file and run analysis.
Attachment Hashing
Default 32 MB: browser digest APIs load full data into memory and are non-streaming. Larger files are flagged for manual hashing.
VirusTotal
Quick Triage
Key Findings
Gateway Blocking Proposals
Body Statements to Consider Blocking
Priority Headers
| Header | Value | SOC Relevance |
|---|
All Headers
| Header | Value |
|---|
Attachments & Hashes
| Filename | Type | Size | MD5 | SHA1 | SHA256 | Status |
|---|
URLs, Domains & VirusTotal
| URL | Main Domain | VT Link | VT Score |
|---|