All tools

Email Header Analyzer

Network

Parse a raw email header block into structured From/To/Subject fields, the Received hop chain, and SPF/DKIM/DMARC results from an Authentication-Results header.

Paste raw email headers, like the text behind Gmail's "Show original" or the header block from a .eml file, and get back the common fields (From, To, Subject, Date, Message-ID), the full Received hop chain in the order the headers list them, and any SPF, DKIM, and DMARC verdicts already present in an Authentication-Results header. Header folding (continuation lines that start with whitespace) is unfolded automatically before parsing. This reads what the headers already say, it never performs a live DNS, SPF, or DKIM lookup of its own, so a forged or missing Authentication-Results header simply shows up as absent rather than being independently re-verified.

emailheadersparsedebugspfdkimdmarc

How to use Email Header Analyzer

  • 1.Paste the raw header block from your email client's "show original" or "view source" option.
  • 2.Check the Received hop chain to trace which servers handled the message and in what order.
  • 3.Check the SPF/DKIM/DMARC badges, sourced from the existing Authentication-Results header, to see whether the receiving server already validated the sender.

Frequently asked questions

Does this verify SPF/DKIM/DMARC itself?
No, it only reads the verdict already recorded in the message's Authentication-Results header. It never performs its own DNS, SPF, or DKIM lookup.
Why are SPF/DKIM/DMARC all "not present"?
The pasted headers don't include an Authentication-Results header, which is common for mail that never passed through a validating mail server, or when only a partial header block was pasted.
What does the Received hop order mean?
Each mail server that handles a message prepends its own Received header, so the topmost one in the raw source is the most recent hop, closest to the final destination.
Is this specific to Gmail?
No, it parses standard RFC 5322 header syntax, so headers copied from Outlook, Apple Mail, or a raw .eml file all work the same way.

Use via API, SDK, or MCP

cURL# Free: 1,000 req/day · Pro: 10,000 req/day
curl -X POST https://api.utilix.tech/v1/tools/email-header-analyzer \
  -H "Authorization: Bearer utx_live_..." \
  -H "Content-Type: application/json" \
  -d '{"headers":"From: Bob <bob@example.org>\nTo: alice@example.com\nSubject: Hello\nReceived: from mail.example.org by mx.google.com; Mon, 10 Aug 2026 07:59:58 -0700\nAuthentication-Results: mx.google.com; spf=pass; dkim=pass; dmarc=pass"}'

Get an API key from your dashboard · Full API docs →