See where it leads.
Before you click.
Reveal the links stored in an original email, compare sender and reply addresses, and inspect attachment names. You get technical details you can review yourself.
What would you like to inspect?
Original .eml file · up to 5 MiB · stays on your device. Export or download the original message from your mail app. Screenshots, PDFs and Outlook .msg files are not supported.
For a button such as “View invoice”, copy its link address without opening it, or select the original .eml email. Pasted plain text does not include a hidden target.
Sender and reply details
Link targets and visible addresses
No supported link was extracted. That is not a safety finding: destinations in images, forms, scripts or unsupported content may be missing.
Attachment metadata
Names and MIME types can be misleading. Contents, archives and attached emails are not inspected or opened.
What this result does not cover
How does the check work?
Version 2 reads MIME email structure and HTML link attributes locally. It compares hostnames and registrable domains using a bundled Public Suffix List, including private suffixes. It does not interpret a message’s wording or assign a fraud probability. Internationalized hostnames are shown in ASCII form.
HTML labels come from source text and image alt text; they are not a reproduction of what your mail app displayed. Relative targets are left unresolved. Script, CSS, QR code, form, website and redirect analysis are outside scope.
What are the limits?
Up to 5 MiB per .eml, 20,000 characters of pasted text, 1,000,000 decoded body characters, 100 displayed links, 100 attachments, 50 sender/reply entries, 20 MIME nesting levels and 128 KiB of MIME headers. Analysis stops after 15 seconds. Missing targets and truncated link lists are reported. Malformed files may be interpreted differently by different mail apps.
The check does not decrypt emails, inspect attachment contents, follow links, query reputation lists or authenticate senders. Passing SPF, DKIM or DMARC text in a file is not treated as proof. An attack using a compromised legitimate account or website may show no domain differences. No independent detection or false-alarm rate has been established.
Where does my email go?
It stays in memory in this browser tab. No email, attachment or entered text is uploaded or stored by this tool. Clear, changing the input mode, reloading or leaving the page clears the working data. Parsing runs separately from the interface; email HTML is never rendered and attachment contents are not offered for opening.
Tool facts
- Use case
- Inspect technical details in a suspicious email or address without opening its links.
- Input
- An original .eml email up to 5 MiB, or an address / text up to 20,000 characters. No .msg, PDF or screenshot input.
- Result & export
- Readable extracted addresses, domains and, for .eml files, message and attachment metadata.
- Limitations
- No AI wording analysis, malware scan, sender authentication or safe/scam verdict. Pasted text cannot reveal hidden link targets.
- Cost & access
- Free, no account. Interactive features require JavaScript.
- Processing
- Tool inputs are processed locally in your browser. Ordinary page requests reach the host; see the privacy notice for details.