Email Header Analyzer

The Email Header Analyzer parses raw email headers and shows you the complete delivery path — every server the message passed through, with hop-by-hop timing — plus the results of SPF, DKIM and DMARC authentication, the message's Return-Path, X-Originating-IP, X-Mailer, and the full set of Received: lines in a human-readable table.

Investigating a suspicious email, debugging a slow delivery path, tracing where a message actually originated, and proving whether authentication passed or failed — these are all header-analysis jobs. When users forward you a phishing message or complain that legitimate mail is landing in spam, the headers hold the answer. This tool saves you from squinting at raw `Received:` lines in a monospaced font.

Because email headers can be forged (except for the receiving-server-added ones), read them from the bottom up — the topmost Received: line is the last hop before your inbox, and the bottom-most is the original sender. Received-SPF and Authentication-Results headers from the final receiving server are the ones you can trust; anything the sender inserted may be manipulated.