Email Header Analyzer - Free Online IT Tool

🔬 Email Header Analyzer

Paste raw email headers to analyze the sender, route, and authentication details.

ℹ️ About Email Header Analyzer

The Email Header Analyzer is a forensic utility that deconstructs the hidden metadata attached to every email message. While you only see the Subject, From, and Body in your mail client, the headers contain a detailed log of the email's entire journey—including the servers it passed through, the time spent at each hop, and the results of various security checks.

This tool extracts key information such as the Authentication-Results (SPF, DKIM, and DMARC status), the originating IP address, and the mail user agent (X-Mailer). It is an invaluable resource for IT support teams and security analysts investigating phishing attempts, troubleshooting delivery delays, or verifying the technical integrity of outgoing communications.

📖 How to use Email Header Analyzer

1. Open your email client and locate the 'View Original,' 'View Source,' or 'Show Headers' option for the message.
2. Copy the entire block of raw text (starting from the top down to the first empty line before the body).
3. Paste the headers into the input field and click 'Run Tool.'
4. Analyze the 'Authentication Summary' to confirm if the email passed security checks.

❓ Frequently Asked Questions

How do I find raw headers in Gmail?

Open the email, click the three dots (More) next to the Reply button, and select 'Show original.'

How do I find raw headers in Outlook?

Double-click the email to open it, go to File > Properties, and look at the 'Internet headers' box at the bottom.

What should I look for in a phishing email?

Check if the 'SPF' or 'DMARC' status is 'FAIL' and look for discrepancies between the 'From' address and the actual originating server mentioned in the 'Received' hops.