Email Header Analyzer
1. Paste Email Headers
Load Sample
2. Analyzed Hop Path
How to Use the Email Header Analyzer
- Copy the full raw email header from your email client.
- Paste the header text into the input field.
- Click the “Analyze” button.
- Review the parsed routing data, sender info, and authentication results.
Formulas and Technical Logic
Email headers trace the path an email took from sender to receiver. The analyzer extracts key fields using Regular Expressions (Regex). It maps ‘Received’ lines to build a timeline. It checks ‘Authentication-Results’ for SPF, DKIM, and DMARC pass/fail statuses. It calculates delays between server hops based on timestamps.
Key Features
- Extracts sender, receiver, and subject details.
- Builds a visual server hop timeline.
- Highlights SPF, DKIM, and DMARC validation results.
- Identifies potential spoofing or spam markers.
Reference Table: Key Header Fields
| Field Name | Purpose |
|---|---|
| Received | Logs each server that handled the email. |
| Message-ID | A unique identifier for the specific email. |
| Return-Path | The address where bounce messages are sent. |
| Authentication-Results | Shows results for SPF, DKIM, and DMARC checks. |
Frequently Asked Questions
How do I find my email headers?
In most email clients like Gmail or Outlook, click the three dots next to the reply button and select “Show original” or “View message details”.
Can headers prove an email is fake?
Yes. Discrepancies in the ‘Received’ path or failed SPF/DKIM checks often indicate a spoofed or phishing email.