Skip to content

Email Header Analyzer

Parse raw email headers to trace the delivery path, delays, and authentication results.

Email headers record the full journey of a message — every mail server it passed through, the time at each hop, and the results of SPF, DKIM, and DMARC checks. Paste raw headers and this tool reconstructs the delivery path, highlights delays, extracts the sender IP, and surfaces authentication results. It's the go-to tool for tracing spam, spoofing, and slow delivery, and everything is parsed in your browser.

Frequently asked questions

Where do I find an email’s raw headers?

In Gmail use “Show original”; in Outlook open message properties. Most clients expose the full source somewhere in the message menu.

What do the Received lines mean?

Each Received line is one mail server that handled the message, listed newest first. Reading bottom-up shows the path from sender to you.

What is the sender IP and why does it matter?

It’s the address of the server that first sent the message, which helps identify the true origin and spot spoofing.

What do SPF, DKIM, and DMARC pass/fail mean?

They show whether the message was authorised by the sending domain and arrived unaltered. Failures are a common sign of spoofing or misconfiguration.

Is my email content uploaded anywhere?

No. Headers are parsed entirely in your browser; nothing is sent to a server.