How to interpret this tool
Visualize mail routes, relays, SPF, DKIM, DMARC, and suspicious hops. A visual anomaly is a reason to inspect context, not proof by itself. Preserve the original file, record its source, and compare multiple indicators before drawing a conclusion.