Email header analyzer

Analyze email headers to trace message origin and detect technical anomalies or spoofing attempts.

⚖️ This tool provides automated preliminary analysis. Results do not constitute expert testimony and must be validated by a qualified forensic expert to have legal admissibility

Upload email file

Drag your file here or click to select

Accepted formats: .EML or .MSG (Outlook)

OR

Paste email headers

How to get headers?

  • Gmail: Menu ⋮ → Show original
  • Outlook Web: Menu ... → View message source
  • Outlook Desktop: File → Properties

🔒 Confidentiality Guaranteed

Your file is analyzed in memory and deleted immediately after processing. No data is stored on our servers. Firme H2E does not keep your documents.

⚖️ Legal Notice

CERTIF is provided as-is, without warranty. Reports are for informational purposes only. If you need a guaranteed analysis with expert validation, contact us to discuss options or have your CERTIF report validated by our certified experts.

Need an expert opinion suitable for legal matters?

This automated analysis is a first step. For a defensible technical opinion and litigation support, consult an H2E forensic expert.

Request expert review

Frequently asked questions

How do I trace the real origin of an email?

By analyzing full headers and relay path, not only the visible “From” line.

What is email spoofing?

It is impersonation where sender identity appears legitimate while origin is fraudulent.

Why can “From” differ from technical headers?

“From” is user-facing text, while technical headers reveal actual routing and authentication evidence.