The interesting part of an email is not the part you read MAILBOX
Takes a saved email apart, offline: the delivery path, the authentication results, the real sending domain, where the links go, what the attachments really are, and what loads when it is opened.
The message
Drop a saved message (.eml) here, or
What is worth knowing
Who it is from
How it got here
Read downwards, oldest hop first. Only the hops added by servers you trust can be relied on.
What the links point at
What loads when you open it
What is attached
The message itself
The text as it was written, with nothing fetched and nothing run.
Every header
How it works
Save a suspicious email as a file and MAILBOX takes it apart offline: the path it travelled, the SPF, DKIM and DMARC results, the real sending domain, where each link actually goes, and whether an attachment is what it claims to be. It gives you the evidence for deciding whether a message is phishing, rather than a single yes or no. The message is read in this tab and never sent anywhere.
Doing this often? To review thousands of emails at once, with threads and a who-wrote-to-whom view, use OBSCURA Case. On its own, US$4 a month; with everything else, US$9 a month or US$79 a year. 7 days free.