MailMapr

MailMapr — spot phishing emails instantly, open EML, MSG, MBOX files, and perform forensic analysis. All 100% offline on your Mac. PHISHING DETECTION • Automatic risk scoring (0-100) for every email • SPF, DKIM, and DMARC authentication analysis • Header spoofing and domain mismatch detection • Suspicious pattern recognition across headers and body TRUST COLOR CODING • Classify emails, domains, and IPs as whitelisted, suspicious, or blacklisted • Instant visual threat assessment with color-coded indicators: green (safe), orange (suspicious), red (threat) • Color coding visible across all view modes — Full, Collapse, HTML, and Plain text • Manage trust lists globally or per project • Right-click any email, domain, or IP to classify instantly FORENSIC ANALYSIS • Full header analysis with parsed fields and raw view • Timeline visualization of email communication patterns • Interactive network graph mapping sender relationships • Cross-incident correlation to detect coordinated attacks • Indicators of Compromise (IoC) tracking with tags and export EMAIL VIEWER & CONVERTER • Open EML, EMLX, MSG (Outlook), and MBOX archive files • No email client needed — works as a standalone email viewer • View message body, headers, attachments, and metadata • Quick View mode — inspect email files without creating a project • Batch import via drag and drop FORMAT CONVERSION & EXPORT • Export to PDF, HTML, EML, and MSG formats • Convert emails for legal documentation and evidence preservation • Export investigation data including trust lists, IoC index, and evidence tags • Share forensic reports with legal teams, management, or law enforcement • Preserve email evidence in standard, portable formats PROFESSIONAL REPORTS • Technical Forensic Report — detailed analysis with authentication results, risk scores, and IoC data • Executive Summary Report — high-level findings for management and legal teams • Export reports as HTML or PDF PROJECT-BASED INVESTIGATIONS • Organize email evidence into separate investigation projects • Global Dashboard for cross-project overview • Per-project dashboard with incident timeline, risk distribution, and sender analysis • Track threat vectors, entry points, and flagged senders PRIVACY FIRST • 100% offline — absolutely no data ever leaves your Mac • No accounts, no cloud, no analytics, no tracking • All processing happens locally on your device • macOS App Sandbox protected • No third-party services or data collection BUILT FOR PROFESSIONALS • Cybersecurity analysts investigating phishing and BEC attacks • Legal and compliance teams reviewing email evidence • IT administrators analyzing suspicious emails from users • Incident responders tracking indicators of compromise • Anyone who needs to open EML, MSG, or MBOX files safely Supports English and Spanish. Requires macOS 14.0 or later.