WT-010
MX
EMAIL / LOCAL UTILITY
Email Header Analyzer
Inspect raw email headers for authentication results, sender domains, routing hops, IPs, and review signals.
HEADERS
LOCAL
NO DATA SENT
EMAIL HEADER ANALYZERAUTH / ROUTING / REVIEW
READYPaste raw message headers to inspect authentication and routing information.
AUTHREPORTED AUTHENTICATION
SPF
UNKNOWN
No result parsed yet.
DKIM
UNKNOWN
No result parsed yet.
DMARC
UNKNOWN
No result parsed yet.
These are the authentication verdicts recorded by the receiving mail system. WhateverTools does not re-run DNS checks or cryptographically verify DKIM signatures.
MSGMESSAGE OVERVIEW
FROM
—RETURN-PATH
—REPLY-TO
—DATE
—SUBJECT
—MESSAGE-ID
—DOMDOMAIN SIGNALS
FROM DOMAIN—
ENVELOPE DOMAIN—
SPF MAIL-FROM—
DKIM SIGNING DOMAIN—
MXRECEIVED ROUTING CHAIN
NO RECEIVED HOPS PARSED
!REVIEW NOTES
Analyze a header to generate review notes.
SHOW RAW AUTHENTICATION RESULTS
No Authentication-Results header parsed yet.
PRIVACY NOTE: Header parsing happens entirely in this browser. The pasted message headers are never sent to WhateverTools.
FIELD NOTE / 010
What can an email header tell you?
Headers can reveal how a message traveled between mail systems, which domains were used for envelope and signing identities, and what SPF, DKIM, and DMARC verdicts the receiving system recorded. Different domains are not automatically malicious, so the review notes are signals to investigate rather than a phishing verdict.