Email Header Analyzer

Paste email headers to trace the delivery path and delays, and check SPF, DKIM, DMARC and spoofing signs.

How do I read email headers?

Paste the full headers (Gmail: ⋮ → Show original). The analyzer unfolds them, lists the Received hops from sender to recipient with times and delays, reads the Authentication-Results for SPF, DKIM and DMARC, and flags mismatched Return-Path or Reply-To domains — common signs of phishing.

Where to find headers

Gmail: open the email → ⋮ → Show original.
Outlook (web): … → View → View message details.
Apple Mail: View → Message → All Headers.

Frequently asked questions

Are my headers uploaded?

No, they are analysed in your browser.

What does “dmarc=fail” mean?

The From domain did not align with a passing SPF or DKIM result — the message may be spoofed.

Why is there a long delay?

Large delays usually point to spam filtering or greylisting at a hop.