Email header analyzer

Paste a raw email and read it back in plain language — the authentication verdicts, the path it took to reach the inbox, and every header in between.

What the headers tell you

Every email carries a stack of headers above the message you read — a running log written by each server that touched it on the way to your inbox. Most mail apps hide them, but they're where the answers live when a message looks suspicious, lands in spam, or takes hours to arrive.

This tool reads three things out of that log. First, the authentication results: whether the receiving server could prove the message really came from the domain in the From line.

Authentication

The SPF, DKIM and DMARC verdicts the mailbox recorded. A pass means the sender proved who they are; a fail is worth a second look.

Delivery path

Each relay the message passed through, oldest first, with the time it spent at each one. A long gap shows you exactly where it stalled.

Every header

The full, unfolded list — From, Return-Path, Message-ID and the rest — so you can check the fields a spoofed message gets wrong.

Analyze a message

Open the original or raw source of an email and paste it below. Nothing is uploaded — the parsing happens entirely in your browser.

Everything is parsed in your browser. The message never leaves this page.

Start with one channel.
Add the others when you're ready.

A test API key is yours immediately. Production unlocks when you add a payment method and verify a sender.

Using Claude Code, Cursor, or Codex? Copy a setup prompt and your agent installs the Bird CLI and skills for you. Pick yours:

Cursor