Email header analyzer
Paste any email's raw headers. We unfold RFC 5322 line-folding, split each header, and surface auth results (SPF, DKIM, DMARC), routing hops, and message identifiers.
Parsed headers will appear here.
FAQ
What's RFC 5322 line folding?
Long header values can wrap onto subsequent lines if the next line starts with whitespace. The analyzer unfolds these before parsing.
Why do I see multiple Received headers?
Each mail server that handles a message adds its own Received header. The most recent hop is at the top.
Are headers sent anywhere?
No. Parsing runs entirely in your browser — the headers never leave the page.
Can it spot a spoofed From address?
It can highlight failing SPF / DKIM / DMARC checks in Authentication-Results. Those are the canonical signals for spoofing.