Microsoft Outlook (Desktop)
- Open the suspicious email (double-click to open in a new window).
- Go to
File → Properties.
- Find the Internet headers box at the bottom.
- Click inside the box, press
Ctrl+A to select all, then Ctrl+C to copy.
- Paste it into the field below.
Outlook on the Web (OWA / Microsoft 365)
- Open the email.
- Click the three dots
⋯ at the top right of the message.
- Select
View → View message source (or View message details).
- Copy all the text and paste it below.
Gmail
- Open the email.
- Click the three dots
⋮ next to the Reply button.
- Select
Show original.
- A new tab opens — click
Copy to clipboard or select and copy all the text.
- Paste it into the field below.
Apple Mail (macOS)
- Select the suspicious email.
- Go to
View → Message → All Headers (or press ⌘⇧H).
- The headers appear at the top of the email — select, copy, and paste below.
Thunderbird
- Open the email.
- Go to
View → Message Source (or press Ctrl+U).
- Copy the header section (everything above the first blank line) and paste below.
Tip: If you are unsure, just copy everything — we will extract the relevant data.