Email Header Analyzer

Client-SideOffline Ready

Trace email delivery paths, check SPF/DKIM/DMARC, and detect delays or spoofing.

Paste the original email headers from Gmail, Outlook, Apple Mail, or Thunderbird.

Test Samples:

Phishing & Spoofing Risk

Evaluates SPF, DKIM, and DMARC alignment to immediately flag forged sender addresses and relay anomalies.

Hop Trace & TLS Encryption

Follows MTA message traversal with transit delays, relay IP tracking, and TLS cryptographic transport badges.

Incident Ticket Export

Copy a formatted security audit report with 1 click to attach to IT helpdesk tickets and SOC investigations.

Frequently Asked Questions

What are email headers and what information do they reveal?
Email headers contain routing metadata recorded by each mail server (MTA) that processed an email. They reveal the originating IP address, relay hops, timestamps, transmission delays, SPF/DKIM/DMARC authentication results, and anti-spam diagnostic scores.
How do I extract raw email headers from Gmail, Outlook, or Apple Mail?
In Gmail, open the email, click the three dots, and select "Show original". In Outlook, go to File > Properties and inspect "Internet headers". In Apple Mail, choose View > Message > Raw Source. Copy and paste the entire raw text into this analyzer.
Does this tool detect email spoofing and phishing?
Yes. The analyzer parses Authentication-Results headers for SPF (Sender Policy Framework), DKIM (DomainKeys Identified Mail), and DMARC alignments, warning you immediately if the sender address does not match the authenticated mail server domain.
Are pasted email headers sent to external servers?
No. Email header parsing is executed 100% client-side in your browser. Sensitive sender, recipient, and subject information remains entirely within your device memory.
Recommended For You

More Network Utilities

View all Network tools