ffee All tools
EN 中文 FR DE

Email Header Analyzer

Parse a raw header block, follow the Received chain, see the delay at every hop and check the authentication results.

Analyse email headers

Received hops: 0
Total delivery time: -
SPF: not present
DKIM: not present
DMARC: not present
From and Return-Path: -
Headers can be forged, so treat the Received chain and authentication results as evidence rather than proof.

How to use the Email Header Analyzer

  1. Open the message source in your mail client and copy the full raw headers.
  2. Paste them into the box and click Analyse to build the header table.
  3. Read the Received chain delays, the authentication results and the address alignment verdict.

Features

Advertisement

More tools

HTTP Status Code Lookup HTTP Header Parser User Agent Parser URL Parser Query String Parser Cookie Parser MIME Type Lookup IP Subnet Calculator IPv6 Subnet Calculator Port Number Lookup MAC Address Lookup Random User Agent

Frequently Asked Questions

Common questions about the free online email header analyzer.

It is the block of metadata at the top of a message that records the route, the sender, the subject and the authentication checks.
Open the message source, copy the raw headers, paste them into the box and click Analyse to build the report.
Every mail server that handled the message adds a Received line, so the chain lists the hops from sender to your inbox.
Only the lines added by your own provider are reliable, because earlier servers and the sender can add anything.
SPF checks whether the sending server was allowed to send mail for the envelope domain that the message claims.
DKIM verifies a cryptographic signature over parts of the message, proving it was not altered after signing.
DMARC combines SPF and DKIM with the visible From domain and tells the receiver what to do when they fail.
A mismatch between the visible From domain and the envelope sender is a common sign of spoofing or of a misconfigured mailing list.
They come from the timestamps each server wrote, so clock drift on any hop can make an individual delay inaccurate.
No. The headers are parsed in your browser, nothing is transmitted, and only the text you paste is ever read.

Last updated: October 10, 2026