Paste the raw headers of any email to see its delivery path, how long each hop took, and whether it passed SPF, DKIM and DMARC. We read only what you paste, and nothing is stored.
How to find your email headers
Gmail: open the message, click the three dots, choose Show original, then copy the text.
Outlook (desktop): open the message, File then Properties, and copy the Internet headers box.
Outlook.com / Microsoft 365 web: open the message, the three dots, View, View message source.
Apple Mail: select the message, then View, Message, Raw Source.
What the analyzer shows you
Authentication: the SPF, DKIM and DMARC results exactly as the receiving server recorded them.
Delivery path: every server the message passed through, in order, with the time spent at each hop so you can spot delays.
Message details: From, Return-Path, Reply-To and Message-ID, which together reveal spoofing and misconfiguration.
About this tool. Every email carries hidden headers recording the servers it passed through and how it authenticated. Paste a raw header block and this analyzer lays out the full delivery path, the time spent at each hop, and the SPF, DKIM and DMARC results in plain English, so you can see exactly where a message slowed down or failed.
Common questions.What is an email header analyzer?
It parses the raw headers every email carries and shows, in plain English, how the message authenticated, every server it passed through, and how long each hop took.
Is it free and private?
Yes, free with no signup. Analysis is done on the header text you paste; we do not read your inbox.
Where do I find the raw headers?
In Gmail use Show original, in Outlook use File then Properties then Internet headers, in Apple Mail use View then Message then Raw Source.
Can headers prove an email is spoofed?
Often, yes. Mismatched From and Return-Path plus authentication failures in the headers are strong signs of spoofing or phishing.