Loading…
Forensics
Where a message came from, how it travelled, whether its sender was authenticated, and which parts of that the evidence can actually support. The message is analysed in your browser.
Paste the original source, the headers, or whatever part of the message you have.
Analysed in this browser tab. Ctrl/⌘ + Enter runs the analysis.
Menus move between app versions; look for “source”, “original” or “headers”. Do not use Forward: a forwarded copy carries your own provider’s headers, not the original sender’s.
Headers can contain your address, your colleagues’ addresses and your organisation’s server names. Nothing you paste here is stored or sent anywhere unless you choose to run the network lookups, which send only IP addresses and domain names.
Paste a message and press Analyse, or load an example.