Email Header Parser
Turn raw header text into readable message fields, Received hops, and reported authentication values. This is a parser, not a cryptographic verifier or spoofing detector.
Parse Email Headers
Header text can contain email addresses, internal hostnames, and message identifiers. The text is sent to this site's parser but is not saved in application storage. Remove anything you do not want to submit.
What the parser does
- Unfolds multi-line header fields
- Reads common message metadata
- Orders Received fields from oldest to newest
- Extracts visible hostnames and IPv4 addresses
- Displays reported SPF, DKIM, and DMARC values
What it cannot prove
- That a pasted header is authentic or complete
- That an Authentication-Results field came from a trusted server
- That a message is safe, legitimate, or free from spoofing
- The sender's physical location
- Cryptographic DKIM validity without the original message
Frequently Asked Questions
How do I find full email headers?
In Gmail, open the message menu and choose Show original. In Outlook, open the message properties. In Apple Mail, choose View, Message, then All Headers. The exact labels can vary by version.
Does this parser verify SPF, DKIM, or DMARC?
No. It displays values written in the pasted Authentication-Results header. Only a receiving mail system with the original message and trusted context can perform the underlying checks.
Can Received headers prove where an email originated?
Not by themselves. Each receiving server normally prepends a Received field, but earlier fields may be forged or removed. Correlate the path with logs from systems you trust.
Is it safe to paste headers?
Headers can contain email addresses, message identifiers, internal hostnames, and IP addresses. Remove sensitive values before parsing. The response is marked private and is not cached.