Delivery Route
Paste email headers and click Analyze.
Email Header Analyzer
Analyze email headers to trace delivery hops, check SPF/DKIM/DMARC authentication, and detect delays or unencrypted transport.
Auto Route
Paste Email Headers
Authentication
—
Standard Headers
—
JSON
—
Tool Features
Related Guides
Email Header Analyzer
Paste raw email headers to trace the full delivery route — every hop from origin to inbox. The analyzer extracts SPF, DKIM, and DMARC authentication results, detects unusual delays between hops, and flags unencrypted SMTP segments. Use this to diagnose email delivery issues, verify authentication, or investigate suspicious messages.
How It Works
The parser extracts Received headers in reverse order to reconstruct the delivery path. Each hop's timestamp is compared to calculate inter-hop delays. Authentication-Results headers are parsed for SPF, DKIM, and DMARC verdicts. The tool flags hops using unencrypted SMTP (no STARTTLS) and delays exceeding 5 minutes.
FAQ
How do I get email headers?
In Gmail: open the email → three dots → "Show original". In Outlook: open the email → File → Properties → "Internet headers". In Apple Mail: View → Message → All Headers. Copy the entire header block and paste it into this tool.
What do the authentication results mean?
SPF pass = the sending server is authorized by the SPF record of the envelope (return-path) domain. DKIM pass = the message signature is valid and the signed content was not altered. DMARC pass = at least one of SPF or DKIM passed and is aligned with the From domain. Any "fail" result is a red flag.
Why is there a long delay between two hops?
Common causes: greylisting (the receiving server temporarily rejects the message), spam filtering (content scanning takes time), queue congestion (the mail server is overloaded), or timezone/clock differences between servers (which can produce false delay readings).