Email Header Analyzer
Trace hops, check SPF/DKIM/DMARC.
Runs entirely in your browser — nothing you enter is uploaded, logged, or tracked.
Paste the full raw headers of an email (the “show original” / “view source” view) to break down its journey: every Received hop with the time it spent there, the authentication results (SPF, DKIM, DMARC), and the From, Return-Path and Reply-To addresses. A fast way to sanity-check whether a message really came from who it claims.
Delivery path
Frequently asked questions
Where do I get the raw headers?
In Gmail use “Show original”; in Outlook “View message source”; in Apple Mail “View → Message → Raw Source”. Paste the whole block here.
What do SPF, DKIM and DMARC mean?
Email authentication checks. SPF verifies the sending server is allowed for the domain; DKIM verifies a cryptographic signature; DMARC ties them to the visible From domain. A pass on all three is a good sign; failures are worth scrutinising.
Can it tell me if an email is phishing?
It surfaces the signals — authentication failures, mismatched From/Return-Path, suspicious hops — that often indicate spoofing. It is an aid to judgement, not a verdict.
Is my email uploaded?
No — the headers are parsed entirely in your browser.