Free Email Header Analyzer
Paste an email's headers to see whether it is really from who it claims — and where it stalled on the way to your inbox.
Paste the full headers
Gmail: open the message → three dots → Show original → Copy to clipboard. Outlook: open the message → File → Properties → Internet headers. You can paste the whole raw message — the body after the first blank line is ignored.
Something not working?
Tell us what went wrong — it helps us fix the tool. Only what you type below is sent; your headers never leave your device. Please do not paste real headers into the feedback box.
Need more power? Meet Email Header Analyzer Pro
One-time payment. Yours forever. No subscription.
| Feature | Free | Pro |
|---|---|---|
| SPF / DKIM / DMARC verdicts & route timeline | Yes | Yes |
| Alignment & red-flag checks | Yes | Yes |
| Batch-analyse a folder of .eml files | — | Yes |
| Phishing-pattern explanations for teams | — | Yes |
| Ads | Shown on page | Ad-free |
Frequently asked questions
Are my email headers uploaded anywhere?
No. Headers are parsed entirely inside your browser with JavaScript. They contain IP addresses and email addresses, which is exactly why this tool never sends them anywhere. You can verify this in your browser's network panel.
What do SPF, DKIM and DMARC mean?
SPF checks whether the sending server was allowed to send for the domain. DKIM checks a cryptographic signature that breaks if the message was altered. DMARC requires one of them to pass for the same domain you see in the From line. The verdicts shown here are the ones your provider recorded — this tool does not re-check them itself.
Why does the route read bottom-to-top?
Every mail server adds its Received line at the top of the headers, so the newest hop is first. The timeline flips the order so you can follow the message from the sender to your inbox, with the wait at each hop.
What should I do if DMARC fails?
Do not click links, open attachments or reply — especially if the message asks for payment or credentials. Check the sender through a channel you already trust, and check whether the domain publishes valid records with our Email DNS Checker.