Email Header Analyzer
Use this working tool to inspect structure, plan credits, or query a domain without confusing that action with mailbox verification.
Your header is parsed in this browser. It is not uploaded to Refresh List or stored.
Email headers, answered.
What does this analyzer check?+
It reads the headers you paste locally and summarizes authentication results, relay hops, timestamps, and visible message fields.
Is my email header uploaded?+
No. The parser runs in your browser. Refresh List does not receive or store the pasted header.
What is Authentication-Results?+
It is a header added by a receiving system that reports checks such as SPF, DKIM, or DMARC. Treat it as evidence from that system, not a universal guarantee.
Does SPF pass prove the message is safe?+
No. SPF supports sender authorization for a domain. It does not prove the message content is safe or wanted.
Does DKIM pass prove the sender is trustworthy?+
No. DKIM verifies a signature and domain alignment context; it does not certify the sender or content.
What does DMARC pass mean?+
It means the visible authentication evidence indicates alignment for the domain policy check. It does not guarantee inbox placement.
Why are signals marked not found?+
The pasted header may be incomplete, or the receiving system may not have added that result. Not found is not the same as failure.
What are Received headers?+
They record relay hops added by mail servers. Multiple timestamps can help estimate transit time, but headers can be incomplete or reordered in a copy.
How is the score calculated?+
The score counts the visible checks that pass: authentication evidence and a Received path. It is an evidence summary, not a reputation rating.
Can this tool detect phishing?+
No. It can highlight authentication evidence and inconsistencies, but you still need to inspect links, attachments, sender context, and content.
What should I paste?+
Paste the raw headers from your email client view-source action, not only the From line.