Forensic Email Header & Hop Tracer

Parse raw RFC 822 email headers, reconstruct SMTP hops, extract originating IPs, and verify SPF/DKIM/DMARC.

Paste raw email headers from Gmail, Outlook, or Thunderbird to analyze the entire delivery route. Reconstruct chronological SMTP relay hops, calculate inter-hop transit delays, extract the sender’s true X-Originating-IP, and evaluate SPF, DKIM, and DMARC authentication verdicts.

Features

  • RFC 822 unfolded header parsing
  • Chronological SMTP hop delay timeline
  • Originating IP extraction
  • SPF, DKIM, and DMARC verdict checks

More AI tools