Email Header Analyzer
Parse raw email headers into sender, routing, dates, and SPF/DKIM/DMARC tokens.
Paste the raw headers from a message source. This page reads common fields and auth tokens in your browser. It does not prove whether a message is genuine.
- From
- Ada Lovelace <ada@example.com>
- To
- Bob <bob@example.com>
- Subject
- Diagrams for Friday
- Date
- Mon, 5 Oct 2026 10:00:00 +1100
- Return-Path
- <ada@example.com>
- Message-ID
- <msg-1@example.com>
Authentication fields
These are the tokens present in the headers. Pass or fail here is what the receiving server wrote — not an independent verdict.
SPF: passDKIM: passDMARC: pass
pass (example.com: domain of ada@example.com designates 203.0.113.10 as permitted sender)
Received path
- by inbound.example.com from mail.example.netMon, 5 Oct 2026 10:00:01 +1100
Worked example
Paste headers with From Ada, a Received hop, and Authentication-Results spf=pass; dkim=pass; dmarc=pass. The page lists sender, date, hops, and those tokens.
FAQ
- Does pass mean the mail is genuine?
- It means the receiving server wrote that result. This page does not re-check DNS or signatures.
- What is the Received path?
- Each hop the message claims to have taken, newest first as written in the headers.
- Are the headers uploaded?
- No.