Mail header analyzer

A mail header is a travel log: every server that touched the message wrote a `Received:` line, and the receiver who tested SPF, DKIM and DMARC wrote its verdict in `Authentication-Results:`. This tool puts both logs on one timeline — in your browser, the mail itself stays where it is.

The timeline runs in travel direction: from the first sending server to the receiver that you are. Per hop it shows who the door was, which time the server noted for itself, and what the difference from the previous hop is — with the honest note that clocks of mail servers diverge, so times are indicative, not proof.

Is this mail really from my bank? The tool does not answer that question with one word but with the facts that lead to it: does the From domain appear in the chain, do the receivers judge SPF, DKIM and DMARC unanimously, and where do they diverge? The conclusion is yours — the analyzer only lays out the page.