Email Header Analyzer
Paste raw email headers to trace the Received hops with delays and read SPF, DKIM and DMARC results — all in your browser. Free.
Paste the full raw headers of an email (in most clients: "Show original" or "View source"). Everything is parsed locally — no header ever leaves your browser.
Summary
- From
- —
- To
- —
- Subject
- —
- Date
- —
- Return-Path
- —
- Message-ID
- —
Authentication
Domain alignment
Delivery path (Received hops)
Read bottom-up: the last hop is where the message originated. Delays are the time added at each relay.
All headers
Tentang Email Header Analyzer
The Email Header Analyzer turns the wall of raw text at the top of an email into something readable. Paste the full headers and you get the sender, recipient, subject, date, Return-Path and Message-ID extracted first, followed by the authentication verdict and the complete delivery path.
Every Received header is parsed into a hop showing which host handed the message to which, when, and how much delay that relay added — read from the bottom up, the last hop is where the message originated. The SPF, DKIM and DMARC results are pulled from Authentication-Results (falling back to Received-SPF), and From is compared against Return-Path to flag domain misalignment, the classic spoofing tell.
The entire analysis runs in your browser. There is no upload, no server call and no logging: the headers you paste — which routinely contain internal hostnames, IP addresses and recipient addresses — never leave your machine. A sample header set is included if you just want to see how the output reads.
Cara menggunakan Email Header Analyzer
- Open the suspect message and copy its raw headers — “Show original” in Gmail, “View source” or “Properties” in most other clients.
- Paste the full block into the text area, or click “Load a sample” to try the tool first.
- Click “Analyze headers” and read the summary: From, To, Subject, Date, Return-Path and Message-ID.
- Check the SPF, DKIM and DMARC cards and the domain-alignment line beneath them.
- Walk the Received hops from the bottom up to see the true origin and which relay added the delay.