What this tool will do
Parse folded raw headers, surface sender-related fields, summarize SPF/DKIM/DMARC assertions when present, and order Received hops with clear uncertainty.
Email Header Analyzer
Trace hops and authentication results from raw headers you paste locally — without uploading the message.
Analysis is performed locally in your browser. Pasted tokens are not uploaded to the server. Loading tool…
What it cannot prove
Headers can be forged. A green-looking Authentication-Results line in a paste is not independent verification. The earliest Received hop is not definitive origin.
Need a professional phishing or breach investigation?
When evidence spans mail, endpoints, and cloud logs, structured investigation helps separate noise from impact.