Read the story in the headers.

Turn raw email headers into a routing timeline and reported authentication results. Everything is parsed locally in your browser.

What this tool checks

Paste the header block from a received email. The analyzer unfolds fields, orders Received hops and highlights the authentication claims included by mail systems.

Reported, not independently verified

Authentication-Results can be forged outside a trusted receiver boundary. This tool displays reported results and does not independently authenticate the message.

Timing needs context

Received timestamps can reflect clock skew or forged hops. A negative delay is flagged rather than presented as a valid delivery duration.

Your headers stay local

Headers can include addresses, IPs and internal hostnames. They are not sent to the API or stored by this tool.

Frequently asked questions

Can this identify the person who sent a message?

No. Routing information may identify mail infrastructure, not a person or physical location.

Does it verify a DKIM signature?

No. Parsing a DKIM-Signature header is different from validating the signature against the signed message and DNS key.

Related email tools

Methodology and sources · Privacy