How to get the .eml file

Gmail (in a web browser)

1. Open the suspicious email. Do not click any links inside it.
2. Click the three-dot menu in the top-right corner of the message (not the one at the top of the inbox).
3. Choose "Show original." A new tab opens with the raw message.
4. Click "Download Original." The file saves to your Downloads folder.
5. Upload that file to the analyzer.

If the file saves with a .txt extension instead of .eml, that is fine. The analyzer accepts it as-is. You can also click "Copy to clipboard" on the Show original page and use the analyzer's "Paste the raw email source" option instead.

Prefer email? From the same three-dot menu, choose "Forward as attachment" and send it to check@fredsprivacy.com. Use this option, not a normal forward, so the original headers stay intact.

Gmail app (iPhone or Android)

The Gmail mobile app does not offer "Show original" or "Forward as attachment." Two options:

1. Use a computer and follow the Gmail steps above. This is the most reliable path.
2. Or use your phone's browser: open gmail.com in Chrome or Safari, request the desktop site from the browser menu, then follow the Gmail steps above.

Avoid tapping Forward in the app and sending it to the analyzer. An inline forward from the app replaces the original headers with your own, which weakens the verdict.

Outlook.com and the new Outlook app

1. Open the suspicious email.
2. Click the three-dot menu at the top-right of the message.
3. Choose "Save as." The message downloads as a .eml file.
4. Upload that file to the analyzer.

No "Save as" option? From the same menu, look under View > View message source, copy everything, and use the analyzer's "Paste the raw email source" option.

Classic Outlook (Windows desktop)

Heads up: dragging a message out of classic Outlook creates a .msg file, which is a Microsoft-specific format the analyzer cannot read. Use one of these instead:

1. Forward as attachment: select the message, then press Ctrl+Alt+F (or use the ribbon: More respond options > Forward as Attachment). Send it to check@fredsprivacy.com. The original arrives with its headers intact.
2. Or use Outlook on the web: sign in at outlook.com or outlook.office.com, find the same message, and follow the "Save as" steps in the section above to get a .eml file.

Apple Mail (Mac)

1. Click the suspicious email once in the message list to select it.
2. Drag it out of Mail and drop it on your Desktop. That creates a .eml file. Done.

Prefer menus? With the message selected, choose File > Save As and set the format to "Raw Message Source." Or choose Message > Forward as Attachment and send it to check@fredsprivacy.com.

Mail on iPhone or iPad

Apple's iOS Mail app has no way to export the raw message or forward it as an attachment, so a submission straight from the app will not carry the original headers.

1. If the account is Gmail, Outlook, or Yahoo, open that provider's website in your phone's browser (request the desktop site) and follow the matching section on this page.
2. Otherwise, handle it from a computer when you can. The email will still be there.

Yahoo Mail

1. Open the suspicious email.
2. Click the three-dot menu in the message toolbar.
3. Choose "View raw message." A page of raw text opens.
4. Select all of it (Ctrl+A, then Ctrl+C; Cmd on Mac).
5. On the analyzer, click "Paste the raw email source instead" and paste it in.

Yahoo does not offer a clean .eml download, so the paste option is the way to go here.

Proton Mail

1. Open the suspicious email.
2. Click the three-dot menu in the message header.
3. Choose "Export" (on some layouts it is under More). A .eml file downloads.
4. Upload that file to the analyzer.

Thunderbird

1. Right-click the suspicious email in the message list.
2. Choose "Save As" (or select the message and press Ctrl+S).
3. Save it anywhere as a .eml file and upload it to the analyzer.