📨 Email Header Analyzer

Paste the raw headers of an email to see its journey from sender to inbox, delays at each hop, and the SPF/DKIM/DMARC verdict. Everything runs in your browser — headers are never sent to our servers.

How to find raw email headers

Gmail: Open the message → 3-dot menu → "Show original"
Outlook (web): 3-dot menu → "View" → "View message source"
Outlook (desktop): File → Properties → Internet headers
Apple Mail: View menu → Message → Raw Source

What this tells you

SPF / DKIM / DMARC — three layers of email authentication. Pass means the sender is genuine; fail means the email may be spoofed.
Hop times — long delays at one hop usually mean a server is overloaded or your message was greylisted. Most legitimate hops are under 1 second.
Originating IP — the first Received: header (read bottom-up) usually shows where the email actually came from. Use the IP lookup tool to identify it.

Related tools

DNS lookup (check sender's MX/SPF/DKIM TXT records) →
IP address lookup (identify the originating server) →
WHOIS lookup →

WhereAmI.com

📨 Email Header Analyzer

Authentication

Delivery Path (0 hops)

Key Headers

What this tells you

Related tools