Free tools / Email

Email Header Analyzer

Paste a message's headers to see its route, delays and authentication.

What this tool does

A message header is the delivery record: each server it passed through, when, and what the receiving server concluded about whether it was genuine. It is where you look when mail is slow, lands in spam, or might be forged.

Paste the full header and this tool lays out the route with the delay at each hop, the SPF, DKIM and DMARC verdicts, and flags mismatches such as a display name showing a different address or replies directed to another domain. It analyses the text only. Nothing in it is looked up, and nothing is stored.

Reading the result

Hops
Each Received line is one server handing the message on. They are shown in the order the message travelled.
spf / dkim / dmarc
The receiving server's own verdicts. The ones to trust are the ones added by your own mail system.
Delay
The time between one hop's timestamp and the previous. Large gaps point at the server that held the message.

Questions people ask

How do I get the full header?

In Gmail open the message, choose the three dots and Show original. In Outlook open the message, then File, Properties and Internet headers. In Apple Mail use View, Message, All Headers.

Can the header be forged?

Everything the sender's side wrote can be. The Received lines added by your own mail provider, and its Authentication-Results, are the ones to rely on, which is why they are at the top.

Is the header kept?

No. It is analysed in memory for the response and discarded. It is not logged, saved, or sent anywhere.

Related tools

Want a person to look at it? These checks read what is public. A review with us covers what they cannot see. See the posture review →