Security•Free tool
Email Header Analyzer – Trace Email Origin & Detect Spoofing
Paste raw email headers to analyze routing hops, sender details and check for spoofing signs like mismatched From/Return-Path. Free and private.
No sign-upBrowser-based
SEC
Tool
Enter your values and get results instantly.
HOW
How to Use
- 1Open the email you want to inspect
- 2Copy the full raw source (in Gmail: ⋮ → Show original; Outlook: ⋮ → View → View message source)
- 3Paste the headers below
- 4Click "Analyze" for sender, routing hops and spoofing indicators
WIN
Benefits
Parses sender, subject, date and routing
Counts email hops from Received chain
Flags spoofing red flags (From vs Return-Path mismatch)
Checklist of missing authentication headers
Runs 100% in your browser
FAQ
Frequently Asked Questions
Where do I find the raw headers in Gmail?
Open the email, click the three-dot menu, choose "Show original". This opens a new tab with the full source — copy everything into this tool.
What does a spoofing flag mean?
A mismatch between the visible From address and Return-Path/Mail-From is a strong sign the display name was spoofed. Use in combination with SPF/DKIM pass headers for a fuller picture.
Are headers private?
Yes — parsing is done locally in your browser. Nothing you paste is sent to any server.