Reveal the True Sender Behind Any Email
For security analysts, IT admins, and anyone who needs to verify email authenticity. Paste raw headers to extract sender IP, mail route, and SPF/DKIM/DMARC results — no signup, all in your browser.
Results update live as you type — no button needed. The Example button fills a sample input.
🔒 You've used your 20 free runs for today
Every tool is free up to 20 conversions a day. Get Pro — $4.99 one-time to unlock every tool with no daily limit.
💳 Buy Pro — $4.99 🔓 I have a code
Free runs reset at midnight (UTC).
Why use Email Header Analyzer?
Extracts sender IP and full mail server route from Received headers
Parses SPF, DKIM, and DMARC authentication results
Highlights timestamps and Message-ID for forensic analysis
Works entirely in your browser — no data leaves your device
Clear verdict: authentic, suspicious, or spoofed
FAQ
What is an email header and why should I analyze it?
Email headers are hidden metadata that record the path an email took from sender to recipient. Analyzing them reveals the true sender IP, mail servers, and authentication results, helping you detect spoofing or phishing.
What do SPF, DKIM, and DMARC mean?
SPF verifies the sending server's IP is authorized for the domain. DKIM checks a cryptographic signature to ensure the message wasn't altered. DMARC ties SPF and DKIM to the From domain and tells you what to do if they fail.
Can this tool tell me if an email is definitely fake?
It provides strong indicators: failed authentication, mismatched sender IPs, or suspicious routes. However, always combine with other checks and never click links or attachments from untrusted sources.
Is my email header data stored or shared?
No. All parsing happens locally in your browser. Your data never leaves your device and is not sent to any server.
More Security & Forensics tools
Base64 Extractor & Decoder - Find & Decode Strings
Extract and decode Base64 strings from logs, dumps, and text. Fast, private, and browser-b
Code Deobfuscator - Decode Obfuscated Code Online
Free online code deobfuscator. Instantly decode URL-encoded obfuscation to reveal readable
Comcast Bill Analyzer - Compare Bills & Spot Hidden Changes
Compare two Comcast bills, terms, or emails side by side. Instantly highlight differences
Cron Time Analyzer - Cron Expression to Human Readable
Convert cron expressions to human-readable schedules and get warned about the risky 2-3 AM
← All tools · Security & Forensics