Email Tools
100% Client-Side Completely private. Confidential email headers are parsed locally in browser memory with zero external telemetry.

Email Header Analyzer & MTA Relay Trace Forensics

Parse RFC 5322 email headers, trace MTA relay hops, and verify SPF, DKIM, and DMARC authentication

Email Security, Protocols & Headers Studio

MIME header forensics, SPF/DKIM/DMARC analysis, and anti-spam obfuscation

🔒 Evaluated 100% locally in your browser memory. No telemetry or headers are sent over the network.
SPF AuthenticationPass
DKIM SignatureNone
DMARC PolicyNone
Subject:Notice: Security Infrastructure Verification & Key Renewal
From:Sarah Connor <sender@acmecorp.com>
To:recipient@company.com
Reply-To:support@acmecorp.com
Date:Fri, 5 Sep 2026 14:28:05 -0700
Message-ID:<9f328a9b-1e24-4f8b-b892-0b293817492c@acmecorp.com>

MTA Relay Transmission Path (2 Hops)

Hop #1SMTP
From: Unknown
By: 2002
Hop #2HTTP
From: mail-ed1-f41.google.com
By: Unknown

About Email Header Analyzer & MTA Relay Trace Forensics

Forensic email header analysis utility. Deconstructs raw MIME headers from Gmail, Outlook, or Apple Mail to reveal sending IPs, Mail Transfer Agent (MTA) hops, relay latency, and SPF, DKIM, and DMARC security authentication results.

Key Capabilities & Features

  • Extracts core RFC 5322 fields: From, To, Subject, Date, Message-ID, and Reply-To
  • Instant authentication status badges for SPF, DKIM, and DMARC verification
  • Chronological MTA relay hop tracer showing transit server path and protocols
  • Detects spoofing risks and relay delivery bottlenecks
  • Works seamlessly with headers from Gmail ("Show Original"), Outlook, and Apple Mail

How to Use Email Header Analyzer & MTA Relay Trace Forensics

1

Obtain Email Header

In your mail client, select "Show Original" or "View Message Details" and copy all headers.

2

Paste Headers

Paste the raw header block into the analysis console.

3

Review Forensics

Inspect SPF/DKIM/DMARC badges, message origin, and step-by-step MTA delivery hops.

Privacy & In-Browser Execution Guarantee

Completely private. Confidential email headers are parsed locally in browser memory with zero external telemetry.

Frequently Asked Questions

How do I find raw email headers in Gmail?

Open the email, click the three vertical dots (More options) next to the Reply button, and click "Show original". Copy the entire text box.

What do SPF, DKIM, and DMARC mean?

SPF verifies that the sending IP is authorized by the domain owner. DKIM ensures the message was cryptographically signed and not altered in transit. DMARC instructs receiving servers what to do if SPF or DKIM fails.