Email Forensics

Email Message Header Analysis

Messageheadertoolbox.googleapps.com

Message Header Analyzermha.azurewebsites.net

Analyze my mail headermailheader.org

Analyse IP addresses

IPinfo | The Trusted IP Data Provideripinfo

URL Analyzers

URL and website scanner - urlscan.iourlscan.io

Intelligence Center - A Real-Time Threat Detection Service || Cisco Talos Intelligence Group - Comprehensive Threat Intelligencetalosintelligence.com

URL Screenshot tools

Helps to take a screenshot and see what is on the page without actually visiting the page

URL2PNG - Screenshots as a Servicewww.url2png.com

WannabrowserWannabrowser

URL extractors

Paste the raw email and extract links from the email.

Extract URLswww.convertcsv.com

CyberChefgchq.github.io

Analyzing Attachements

After you have obtained the attachment, you can then get its hash. You can check the file's reputation with the hash to see if it's a known malicious document.

sha256sum Double\ Jackpot\ Slots\ Las\ Vegas.dot

Then we can use the following sites to check reputation of the file.

Talos File Reputation Lookup || Cisco Talos Intelligence Group - Comprehensive Threat Intelligencetalosintelligence.com

VirusTotalVirusTotal

Request A Demo | ReversingLabsReversingLabs

Malware Sandbox

Interactive Online Malware Analysis Sandbox - ANY.RUNapp.any.run

Deep Malware and Phishing Analysis - Joe Sandboxwww.joesecurity.org

Free Automated Malware Analysis Service - powered by Falcon Sandboxwww.hybrid-analysis.com

Automated Phishing Analysis

PhishToolwww.phishtool.com

Email Record Checking

DMARC Domain Checker - dmarciandmarcian

DKIM Inspector - dmarciandmarcian