Email Header Analyzer

За Email Header Analyzer

The Email Header Analyzer turns the wall of raw text at the top of an email into something readable. Paste the full headers and you get the sender, recipient, subject, date, Return-Path and Message-ID extracted first, followed by the authentication verdict and the complete delivery path.

Every Received header is parsed into a hop showing which host handed the message to which, when, and how much delay that relay added — read from the bottom up, the last hop is where the message originated. The SPF, DKIM and DMARC results are pulled from Authentication-Results (falling back to Received-SPF), and From is compared against Return-Path to flag domain misalignment, the classic spoofing tell.

The entire analysis runs in your browser. There is no upload, no server call and no logging: the headers you paste — which routinely contain internal hostnames, IP addresses and recipient addresses — never leave your machine. A sample header set is included if you just want to see how the output reads.

Как да използвате Email Header Analyzer

1. Open the suspect message and copy its raw headers — “Show original” in Gmail, “View source” or “Properties” in most other clients.
2. Paste the full block into the text area, or click “Load a sample” to try the tool first.
3. Click “Analyze headers” and read the summary: From, To, Subject, Date, Return-Path and Message-ID.
4. Check the SPF, DKIM and DMARC cards and the domain-alignment line beneath them.
5. Walk the Received hops from the bottom up to see the true origin and which relay added the delay.

Често задавани въпроси