Start with the email header
Headers are the most important evidence: they can show authentication failures and mismatched sender addresses. Add the body too when available for supporting context.
The email is sent only for analysis and is never written to the database. The report records aggregate outcomes only.
Drop a saved Outlook .msg file here
Or click this box to choose a file. Maximum 10 MB. The file is analysed for this request only and is not retained.
Or click this box to choose a file. Maximum 10 MB. The file is analysed for this request only and is not retained.
No file selected
If dragging an attachment from Outlook opens “Save As”, save the attachment first, then use this button or drag the saved file from File Explorer.
How to get the header: Gmail: three-dot menu → Show original → copy headers. Outlook web: More actions → View → View message details. Outlook desktop: File → Properties → copy Internet headers.
Ready
Privacy: no header, email content, subject, recipient, URLs, or attachments are stored. The From address is recorded for reporting and a one-way keyed fingerprint is retained to identify senders previously marked Not Legit.