Paste any email header to instantly trace its origin, verify sender authenticity with SPF/DKIM checks, and uncover hidden details. The essential tool for security analysts and IT professionals.
Analyze an Email HeaderFinding the raw message source or header is simple. Here’s a quick guide for the most popular email client, Gmail.
Step 1: Open the Email
First, open the specific email you want to analyze in your Gmail inbox.
Step 2: Find the 'More' Menu
In the top-right corner of the email panel, click the three vertical dots (the "More" menu).
Step 3: Click "Show original"
Select "Show original" from the dropdown. This opens a new tab with the full header. Copy the entire content and paste it into the analyzer above.
Email headers contain a wealth of information that can reveal the true origin and journey of a message. Analyzing them is a critical skill for security, troubleshooting, and forensics.
Verify if an email truly came from the sender it claims by checking SPF, DKIM, and DMARC authentication results.
Follow the IP address trail to see the geographical path an email took from the sender to your inbox.
Identify server delays, misconfigurations, or routing issues that might be affecting email delivery.
Yes. This tool is 100% private. All parsing and analysis happen entirely within your browser. The email header data you paste is never sent to our servers or stored anywhere.
The process is similar in most clients. In Outlook, open the email, go to File > Properties, and find the 'Internet headers' section. In Apple Mail, select the email and go to View > Message > All Headers.
They are three key email authentication methods. SPF (Sender Policy Framework) verifies that the sending server is authorized. DKIM (DomainKeys Identified Mail) provides a digital signature to verify the message wasn't altered. DMARC tells receiving servers what to do if SPF or DKIM checks fail. Passing these checks is a strong indicator that the email is legitimate.