Your files stay on your device Email header analyzer Paste raw email headers and see the From and Return-Path, each Received hop with its delay, and the SPF, DKIM, DMARC and ARC results. Paste a header block The From and Return-Path pair, every Received hop with its delay, and the recorded SPF, DKIM, DMARC, and ARC verdicts appear as you type. Headers can be forged. Any relay in the chain can write whatever From, Received, or Authentication-Results line it likes, so this page is analysis, not proof. The SPF, DKIM, DMARC, and ARC outcomes are read out of the headers exactly as an upstream server recorded them; they are not re-verified against DNS here. A mismatch between From and Return-Path is common with mailing lists and forwards, and is not evidence of wrongdoing on its own. Options More network tools - HTTP timing probe (/network/http-timing) All network tools (/network) Was this tool useful? YesNo Canonical HTML: https://nutter.tools/network/email-header-analyzer Markdown version: https://nutter.tools/network/email-header-analyzer.md Plain-text version: https://nutter.tools/network/email-header-analyzer.txt Agent index: https://nutter.tools/llms.txt