Skip to content
COEUS
Install

Email Header & EML Analyzer

Read the route, compare sender details and extract leads from an email.

Processed in your browser. Your input is not uploaded.

Where to find headers

0 / 262,144 bytes

No account or extension required.

How to use it

  1. 1

    Paste headers or choose an EML file

    Add one supplied message record. The file stays in this browser and is not uploaded.

  2. 2

    Analyze the supplied evidence

    Review stated sender fields, reported authentication, recorded Received hops and supported identifiers.

  3. 3

    Check the original record

    Compare the interpretation with the escaped original headers, copy a value, or hand off one selected identifier to Coeus.

Where to find headers

In Gmail, open the message menu next to Reply and select Show original. Copy the original header block. See the Gmail instructions.

In new Outlook or Outlook on the web, use More actions → View → View message details. In classic Outlook for Windows, open the message, then File → Properties → Internet headers. See the Outlook instructions.

What the results mean

Reported authentication is not verification.

SPF, DKIM and DMARC entries describe what a reporting service recorded. This tool performs no DNS checks or fresh authentication verification.

Delivery headers are supplied evidence, not proven origin.

Received order and intervals describe the message record. They do not establish who sent it, total delivery time or whether it is safe.

Unsupported mail formats and active content stay out of scope.

Outlook MSG files, archives and mailbox collections are unsupported. Email HTML, links and attachments are never opened or fetched.

Related tools

Keep working with the same local-first toolkit.

IOC ExtractorFind, deduplicate and review identifiers in text.URL ParserRead URL structure and reveal supported Safe Links destinations.