Free Attachment Extractor

The Attachment Extractor tool parses and decodes the technical components of email — including headers, body structure, MIME parts, and metadata. Email headers contain a complete audit trail of the message's journey from sender to recipient, including each server it passed through, authentication results (SPF, DKIM, DMARC), timestamps, and routing information. This is essential for diagnosing delivery failures, detecting phishing, and auditing email authentication.

To get raw email headers: In Gmail, open the email → click the three-dot menu → "Show original". In Outlook, open the email → File → Properties → Internet headers. In Apple Mail, View → Message → All Headers. In Yahoo Mail, click the three-dot menu → View Raw Message. Copy the full header block and paste it into our Email Header Analyzer for a detailed breakdown.

Email headers reveal: (1) The true originating IP address and server — not just what the From header shows. (2) SPF, DKIM, and DMARC authentication results. (3) The full delivery path with timestamps for each hop. (4) Whether the From header matches the authenticated domain (a key phishing indicator). (5) The email client and software used to compose the message. Mismatches between the From address and authenticated sender are a strong phishing signal.

MIME (Multipurpose Internet Mail Extensions) allows email to carry content beyond plain text — HTML bodies, images, attachments, and more. A MIME email consists of a multipart structure where each part has a Content-Type (e.g. text/plain, text/html, image/png, application/pdf). Our MIME Viewer and MIME Decoder let you inspect the complete MIME structure of any raw email message to debug rendering issues or extract attachments.