FTFreeTools
✉

Email Header Analyzer

Parse .eml files or pasted headers: Received chain with per-hop delays, SPF / DKIM / DMARC verdicts, DKIM signature parameters and decoded subjects — pure local text parsing, no DNS lookups and no signature verification.

Runs in browserEmailForensics

Last changed in v0.10.1

Loading tool…

How to use

  1. Drop an .eml file onto the left pane, or paste everything from the first header line to the first blank line.
  2. The delivery chain is ordered earliest to latest with a per-hop delay; timestamps that go backwards are called out.
  3. The authentication tab lists every SPF / DKIM / DMARC verdict with its source; the last verdict wins.
  4. This is text parsing only — no DNS, no key fetching, no signature verification. Findings are leads, not a verdict.

Related tools

JLOCAL

JWT Decoder

Decode header and payload locally, verify HS256-family signatures and detect expiry.

Web securityJWTHS256
.*LOCAL

Regex Tester

Highlight matches live, inspect capture groups and indices, and preview replacements.

TextRegExpGroups
AaLOCAL

Text Statistics

Characters, words, lines, paragraphs and estimated reading time in one pass.

TextWord countReading time