FRANK
to
frank
a letter is to mark it verified for carriage
cases this session:
0
case intake
Drop an
.eml
or
.mbox
file anywhere in this box, or paste raw headers below. Nothing leaves this box until you submit it.
choose file…
enable DNS resolution (SPF / DKIM / DMARC live verification — off is air-gapped mode)
enable hash-intel lookups (MalwareBazaar / VirusTotal — sends file hashes off-host, requires an API key configured on this instance)
enable sandbox detonation (CAPE — submits attachments to a sandbox for dynamic analysis, requires a CAPE instance configured on this instance, results may take several minutes)
frank it →
—
linked cases
sandbox detonation
identity
findings
mime artifacts
received chain
newest → oldest
raw source
toggle raw message text (unrendered, defanged on display only)
loading…
chain of custody