Back to Toolkit

Email Header Analysis

Deconstruct and analyze email headers to uncover the technical journey and potential spoofing indicators of any message.

Ensure you copy the entire header block from your email client (e.g., 'Show Original' in Gmail).
What are Headers?

Email headers contain the routing information for a message, including the sender's IP, mail server path, and authentication results (SPF, DKIM, DMARC).

Forensic Insights

Our analyzer helps you spot inconsistencies that indicate phishing, such as mismatched 'From' addresses or failed authentication checks.