When a user reports an email as suspicious to the help desk email we will need a downloaded copy of that email before before we can escalate the ticket to our security team. Within the downloaded copy there are details needed to properly block the sender.