Tools / Email header analyzer

Email header analyzer

Paste the raw headers of a suspicious message and get the delivery path, the authentication results the receiving server recorded, and the alignment checks that expose spoofing.

Breaks out

Message: From, Return-Path, Reply-To, To, Subject, Date, Message-ID.
Authentication: SPF, DKIM and DMARC results from Authentication-Results / Received-SPF, and the DKIM signing domain (d=).
Delivery path: each Received hop in chronological order with the time gap between hops (large gaps are flagged).
Flags: SPF fail/softfail, DMARC fail, From ≠ Return-Path, From ≠ DKIM d=, no DKIM.

Privacy

Parsed on our server and discarded immediately — not stored or written to disk. DKIM signatures are inspected, not cryptographically verified.

How to get the headers

Gmail: ⋮ → Show original. Outlook: File → Properties → Internet headers. Apple Mail: View → Message → All Headers.