Web Tools
Email Header Analyzer
Inspect SPF, DKIM, DMARC, and delivery path headers.
Raw email headers
Authentication summary
These results are extracted from Authentication-Results headers, not from live DNS checks.
Message details
Findings
- good
SPF passed according to Authentication-Results.
- good
DKIM passed according to Authentication-Results.
- good
DMARC passed according to Authentication-Results.
Authentication-Results headers
- mx.google.com; spf=pass smtp.mailfrom=example.com; dkim=pass header.d=example.com; dmarc=pass header.from=example.com
Received chain
- from mail.example.com (mail.example.com. [192.0.2.10]) by mx.google.com with ESMTPS id abc123 for <user@example.net>; Tue, 1 Sep 2026 10:00:00 +0000
About This Tool
Email headers contain the technical trail behind a message: which servers handled it, whether SPF, DKIM, and DMARC passed, what Return-Path was used, and which authentication results the receiving provider recorded. This analyzer parses raw headers locally in your browser so you can understand delivery and authentication signals without uploading message data. It is useful when checking domain email setup, investigating suspicious mail, or comparing results after changing DNS records.
How To Use It
- Open the original message or show-original view in your mail app and copy the full raw headers.
- Paste the headers into the analyzer. Keep message body content out if you only want to inspect headers.
- Review SPF, DKIM, DMARC, Received hops, From, Return-Path, and Message-ID fields.
- Use the findings as clues, not as a final security verdict. Confirm suspicious messages with your mail provider or security process.
Examples
Check a new domain email setup
After adding SPF, DKIM, and DMARC DNS records, paste a delivered message header to see whether the receiving provider recorded pass results.
Review a suspicious message
Look for failed DMARC, missing authentication results, unusual Return-Path differences, or a strange Received chain.
Debug forwarding
Forwarded messages can add several Received hops and may affect SPF. Header results help separate forwarding behavior from real DNS mistakes.
Useful Notes
What this analyzes
The tool parses header lines, unfolded continuation lines, Authentication-Results, ARC-Authentication-Results, Received hops, From, To, Subject, Date, Return-Path, and Message-ID. It extracts SPF, DKIM, and DMARC verdicts when those verdicts appear in Authentication-Results.
What this does not prove
Headers can be complex and some visible fields may be forged before delivery. This tool does not contact mail servers, verify DKIM signatures cryptographically, query DNS, or decide whether a message is safe to open.
Privacy
Analysis runs locally in the browser. The pasted headers are not sent to a server by this tool. Headers may still contain email addresses, IP addresses, message IDs, and routing details, so avoid sharing screenshots publicly.
Authentication result meaning
SPF checks whether the sending server is allowed by the envelope domain. DKIM checks whether a signed message still matches its signature. DMARC checks whether SPF or DKIM aligns with the visible From domain and applies the domain owner's policy.
Use with DNS tools
If authentication fails, review your SPF, DKIM, and DMARC DNS records, then send a fresh test message and analyze the new headers. DNS propagation and provider-specific signing behavior can take time.
FAQ
Can this tell if an email is definitely safe?
No. Passing authentication is only one signal. A message can pass SPF, DKIM, and DMARC and still be unwanted or misleading.
Where do I find raw email headers?
Most mail apps have options such as Show original, View source, View message details, or Download original. Copy the header section with Name: value lines.
Why are SPF, DKIM, or DMARC unknown?
The pasted headers may not include Authentication-Results, or the receiving provider may format results differently from the common patterns this tool extracts.
Does this upload my email headers?
No. The parsing runs locally in your browser and does not send the pasted header text anywhere.
Related Tools
DMARC Record Generator
Build a DMARC TXT record for domain email protection.
DNS Record Validator
Check DNS record values before adding them to a provider.
HTTP Status Code Lookup
Find HTTP status meanings and next steps.
Meta Tag Previewer
Preview search and social snippets from page metadata.