Email Analyser
Paste raw email headers to analyse authentication, routing, and phishing signals. No data leaves your browser.
Could not extract originating IP
The originating IP is extracted from the oldest Received: header. If no public IP was found, the email may have been sent entirely within a private network, or the headers were truncated.
No routing hops found
Routing hops come from Received: headers added by each mail server in the delivery chain. If none appear, the headers may be incomplete or the email was sent directly without relay.
No phishing signals were detected in these headers. This does not guarantee the email is safe — always verify unexpected requests through a known-good contact method, especially if they involve payments, credentials, or urgent actions.
Paste email headers above and click Analyse
Headers contain routing, authentication and origin data