Email Tools
Email Header Analyzer
Turn raw email headers into a readable delivery path with auth verdicts.
Powering up the tool…
What this tool does
About the email header analyzer
Paste the full headers: hop-by-hop route with per-hop delays, SPF/DKIM/DMARC results, and From/Reply-To mismatch flags — parsed locally.
How to use it
- In your mail client, open the message’s raw source (Show original / View source).
- Paste everything here — parsing is local; the message goes nowhere.
- Read the hop chain oldest-first with per-hop delays.
- Review the authentication verdicts and the mismatch flags.
Useful for
- Investigate a suspicious email’s real origin before anyone clicks.
- Find which hop delayed yesterday’s urgent message by four hours.
- Check what SPF, DKIM and DMARC verdicts your own newsletters earn.
Straight answers
Email Header Analyzer FAQ
Which parts of headers can be trusted?
Received lines added by YOUR provider and the Authentication-Results it stamped — those they wrote themselves. Everything the sender controls (From, Subject, earlier Received lines) is trivially forgeable, which is exactly why the authentication verdicts matter.
What does a Reply-To mismatch mean?
Replies will go somewhere other than the apparent sender — the load-bearing trick in payment-fraud emails, where From looks like your supplier and Reply-To collects the invoice. Occasionally legitimate; always worth the two seconds this flag costs.