MESSAGE INVESTIGATION
Message Header Analyser
Paste the complete raw header to reconstruct the mail route and explain the recorded security checks.
Your header is not retained
The complete pasted header and its addresses, message identifiers and relay details are analysed transiently. Only privacy-safe usage statistics are logged.
What this means
Results can change during delivery
Final authentication check
These are the latest recorded results. Each explanation accounts for earlier checks where the header provides them.
What deserves attention
Authentication through the journey
Read these checks in order. Open technical evidence only when you need the original result recorded in the header.
Mail-flow timeline
Read from the originating systems towards the final receiving system. Delays over five minutes are identified; delays of 10–20 minutes are highlighted in yellow and delays over 20 minutes in red. Regions are cautious indicators inferred from header names, not authoritative geolocation.
Important: Header analysis supports an investigation but cannot prove that a message or its links and attachments are safe. Treat unexpected requests, payment changes and credential prompts with caution.