All Tools

Mail Header Analyzer

Paste raw email headers to trace the delivery path, identify delays, and check authentication results.

In Gmail: Open email → ⋮ → "Show original". In Outlook: Open email → File → Properties → Internet Headers.

Frequently Asked Questions

Common questions about the Mail Header Analyzer tool.

Email headers log every mail server the message passed through, along with timestamps, authentication results (SPF, DKIM, DMARC), and the originating IP. They are the definitive source of truth for investigating delivery delays, spam, and phishing.

In Gmail, open the message, click the three-dot menu → 'Show original'. In Outlook, File → Properties → Internet headers (or 'View message source' in the web client).

It means the IP that delivered the mail is listed in the sender domain's SPF record. It does NOT mean the mail is legitimate — only that the sending server was authorised to send for the domain in the Return-Path.

Watch for: Received chains with more than 4-5 hops, IP addresses in residential ranges, timestamps out of order, missing DKIM-Signature, and From vs Return-Path domain mismatches (common in spoofing).

More Free Tools

MX Record Lookup
SPF & DKIM Check
Port Check
Ping Test
Traceroute
DNS Lookup
Reverse DNS (PTR)
SSL Certificate Checker