Email Header Analyzer
Paste a raw email header to inspect routing hops, sender metadata, authentication results, timestamps, and signs of spoofing or delivery trouble.
Analyze header
Paste raw email header
Decoded fields
Message metadata
- From
- -
- Return path
- -
- Reply to
- -
- To
- -
- Subject
- -
- Date
- -
- Message ID
- -
Delivery path
Received hops
| Hop | Server / IP | Time |
|---|---|---|
| Paste a header to inspect route hops. | ||
Warnings
Potential issues
- Paste a header to see security and delivery warnings.
How to get email headers
In Gmail, choose Show original. In Outlook web, choose View message source. In Apple Mail, use View > Message > Raw Source. Copy the raw header text and paste it above.
What to inspect first
Check SPF, DKIM, and DMARC results, then compare the From domain with Return-Path and review Received hops for unusual servers or long delivery delays.
FAQ
Email header questions.
What is an email header?
An email header is metadata added to every email. It includes sender, recipient, subject, timestamps, message IDs, authentication results, and the servers that handled delivery.
How do I get full email headers from Gmail?
Open the message in Gmail desktop, click the three-dot menu next to reply, choose Show original, then copy the original message header text into this analyzer.
What are SPF, DKIM, and DMARC?
SPF checks whether the sending server is authorized, DKIM checks whether the message was cryptographically signed, and DMARC tells receivers how to handle authentication failures.
Is this email header analyzer private?
Yes. The parser runs in your browser. The raw header text is not sent to ThriveDesk or any external service.
Can email headers be forged?
Some header fields can be forged, especially display sender fields. Authentication results, server route details, and domain alignment help reveal suspicious messages.
