Email Header Analyzer - Trace Hops & Auth Results

Auto Route

Email Header Analyzer

Paste raw email headers to trace the full delivery route — every hop from origin to inbox. The analyzer extracts SPF, DKIM, and DMARC authentication results, detects unusual delays between hops, and flags unencrypted SMTP segments. Use this to diagnose email delivery issues, verify authentication, or investigate suspicious messages.

How It Works

The parser extracts Received headers in reverse order to reconstruct the delivery path. Each hop's timestamp is compared to calculate inter-hop delays. Authentication-Results headers are parsed for SPF, DKIM, and DMARC verdicts. The tool flags hops using unencrypted SMTP (no STARTTLS) and delays exceeding 5 minutes.

FAQ

How do I get email headers?

In Gmail: open the email → three dots → "Show original". In Outlook: open the email → File → Properties → "Internet headers". In Apple Mail: View → Message → All Headers. Copy the entire header block and paste it into this tool.

What do the authentication results mean?

SPF pass = the sending server is authorized by the domain's SPF record. DKIM pass = the message signature is valid and the content hasn't been altered. DMARC pass = both SPF and DKIM align with the From domain. Any "fail" result is a red flag.

Why is there a long delay between two hops?

Common causes: greylisting (the receiving server temporarily rejects the message), spam filtering (content scanning takes time), queue congestion (the mail server is overloaded), or timezone/clock differences between servers (which can produce false delay readings).

Paste Email Headers

Delivery Route

Paste email headers and click Analyze.

Authentication

Standard Headers

JSON

Tool Features

[Ad] Email Header Inline

Related Guides