Free · Emailed report · Instant

What's hiding in your email headers?

We reveal the

Paste any email's raw headers. We trace every hop, verify SPF / DKIM / DMARC, and flag spoofing patterns in seconds.

Headers are processed in memory. We email your full report to the address above and keep a copy so a specialist can follow up — no spam, ever.

Also free: Deliverability troubleshooter (SPF · DKIM · DMARC) · Talk to a specialist

What you get back

The route, the verdicts, and the spoofing tells.

Raw headers are the flight recorder of an email. We parse them in memory and hand you a plain-language reading.

Hop chain
Every server the message passed through, in order, with the time spent at each hop and any suspicious relay.
SPF, DKIM, DMARC verdicts
What the receiving server concluded, pulled from Authentication-Results and ARC, with alignment checked against the From domain.
Spoofing flags
Mismatched Return-Path, display-name tricks, missing or forged signatures, lookalike domains.
Sender fingerprint
Which platform actually sent it (Workspace, Microsoft 365, an ESP, a bare VPS) and whether that fits the From domain.
Risk and next steps
A verdict you can forward to whoever manages your domain, with the exact record to fix first.

How to read your result

Use it on a message that landed in spam to see which layer failed. Use it on a suspicious message to see whether it really came from the domain it claims.

Gmail: open the message, the three dots, Show original. Outlook: File, Properties, Internet headers. Copy everything from the first Received line down.

Frequently asked questions

What is an email header analyzer?

It parses the raw headers of an email and shows the hop-by-hop delivery path, SPF, DKIM, and DMARC authentication results, timestamps, and any spoofing flags in a readable layout.

Is the email header analyzer free?

Yes, it is free. When you paste the raw headers, they are processed securely on our server to generate your report. We ask for an email address so we can send you the results — read how we handle your data in our privacy policy.

How do I get the raw headers of an email?

In Gmail, open the message, click the three-dot menu, and choose "Show original". In Outlook, open the message and go to File then Properties to find the internet headers, then paste them into the analyzer.

Can it tell me whether SPF, DKIM, and DMARC passed?

Yes. The analyzer reads the Authentication-Results header and shows pass or fail for SPF, DKIM, and DMARC, plus alignment, so you can pinpoint exactly where authentication broke.