Skip to content
← All analysers
Technical analysis

Email header analyser

Read authentication, DMARC alignment, and hop-by-hop delays from raw headers.

Short answer

Raw headers answer three questions: did SPF and DKIM pass, did either pass with a domain that aligns with the visible From (which is what DMARC actually requires), and how long each hop held the message. A vendor signing with its own domain is the most common cause of DKIM passing while DMARC fails.

Gmail: ⋮ → Show original. Outlook: File → Properties → Internet headers. Apple Mail: View → Message → All Headers.

Runs entirely in your browser. The headers you paste is never sent to a server, logged, or stored — this page has no backend to send it to.

Paste headers to see authentication, alignment, and the delivery path. Nothing is analysed until you do.

How to use it

  1. Open the message and export its source: Show original in Gmail, Internet headers in Outlook, All Headers in Apple Mail.
  2. Copy everything from the first Received: line to the blank line before the body.
  3. Paste it in. Read the alignment findings first — they explain DMARC failures that the raw verdicts do not.
  4. Check the delivery path for hops holding the message; sustained delays mean receiver-side throttling.

Frequently asked questions

Are my headers uploaded anywhere?

No. Parsing happens in your browser and this page has no backend. Headers routinely contain recipient addresses and internal hostnames, which is exactly why.

DKIM passed but DMARC failed. Why?

Alignment. DMARC requires the DKIM d= domain to match your From domain. If your platform signs with its own domain, DKIM passes and DMARC still fails. Set up a custom signing domain.

What is a normal delivery time?

Seconds. Minutes of delay at a single hop usually means the receiver is rate-limiting a sender it does not trust yet.

Guides that go deeper

More technical analysis

All analysers
Technical analysis

SPF record analyser

Parse an SPF record, count its DNS lookups, and find what will break it.

Runs in your browser
Technical analysis

DMARC record analyser

Grade a DMARC record on enforcement, not just syntax.

Runs in your browser
Technical analysis

DKIM key analyser

Check a DKIM public key's strength, revocation state, and tags.

Runs in your browser