Contact

Email Header Analyzer

Parse raw email headers into sender, routing, dates, and SPF/DKIM/DMARC tokens.

Paste the raw headers from a message source. This page reads common fields and auth tokens in your browser. It does not prove whether a message is genuine.

From
Ada Lovelace <ada@example.com>
To
Bob <bob@example.com>
Subject
Diagrams for Friday
Date
Mon, 5 Oct 2026 10:00:00 +1100
Return-Path
<ada@example.com>
Message-ID
<msg-1@example.com>

Authentication fields

These are the tokens present in the headers. Pass or fail here is what the receiving server wrote — not an independent verdict.

SPF: passDKIM: passDMARC: pass

pass (example.com: domain of ada@example.com designates 203.0.113.10 as permitted sender)

Received path

  1. by inbound.example.com from mail.example.net
    Mon, 5 Oct 2026 10:00:01 +1100

Worked example

Paste headers with From Ada, a Received hop, and Authentication-Results spf=pass; dkim=pass; dmarc=pass. The page lists sender, date, hops, and those tokens.

FAQ

Does pass mean the mail is genuine?
It means the receiving server wrote that result. This page does not re-check DNS or signatures.
What is the Received path?
Each hop the message claims to have taken, newest first as written in the headers.
Are the headers uploaded?
No.