Observed arrival · 2026-10-16
PostVigil — Email Investigation
A browser-based toolkit for investigating suspicious email, checking domain health, and preparing follow-up actions for Microsoft 365.
- For
- Email administrators investigating suspicious messages
- Worth noticing
- Its lookalike watch list flags examples including Cyrillic-character substitutions and deceptive subdomains such as lawcomm.co.uk.secure-docs.com.
Field notes
The interface separates analysis into authentication, links and files, delivery, reputation, response, messages and headers. It says .eml/.msg files are parsed in the browser; domain checks use public DNS, and DMARC report files can be read in-browser or routed to customer-specific report addresses, with reports stored in the EU. Reputation lookups send extracted IPs and domains to named third-party services, while urlscan offers private, unlisted and public visibility choices.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
One card from the complete issue