Email evidence, explained

Trace the email.
See the evidence.

From confusing headers to a clear picture of the sender, the message, and what the mail filter saw.

Start an investigation

One message at a time

Your email stays in this browser.
Only the IP address or domain you select leaves for an optional lookup.

No email handy?

How do I get the original email?

In Outlook, save or download the message as .eml or .msg. In Gmail, open the message menu, choose Show original, then Download original. Prefer the recipient's original message: ordinary forwarding can remove the evidence we need. If you only have headers, use the paste tab.