TOOLS / EMAIL HEADER ANALYZER
Email Header Analyzer
Understand an email's authentication reports and delivery path without uploading your message. Parsing stays in your browser.
Message details
Summary
Authentication
SPF, DKIM and DMARC below are results reported by a mail server in these headers. This analyzer does not independently verify them.
Optional live DNS verification
Header analysis remains local. Only if you click Verify DNS, the selected domain and up to two public IPv4 sender-hop addresses are sent to Google Public DNS. No raw headers or message contents are uploaded. Current DNS is not proof that this message authenticated correctly when it was sent.
Checks current SPF, DMARC, MX and PTR for up to two public IP addresses observed in Received headers. DKIM selectors require a known selector and are not automatically enumerated.
Delivery timeline
Starting heuristics, not a measured global email average: under 60 seconds normal, 60–300 seconds elevated, over 300 seconds long. Adjust for your infrastructure. These intervals compare adjacent Received timestamps, not guaranteed per-server processing times.
Received lines appear oldest first below. Hop timing is derived from server-supplied timestamps; clocks may differ and untrusted Received fields can be forged.
Diagram is based only on Received headers. Earlier hops may be missing or forged. PNG export is planned.
This tool parses untrusted text. DNS checks happen only when you explicitly select Verify DNS and are snapshots of public records, not historical authentication proof. DKIM/ARC signatures are not cryptographically verified, and results do not establish sender identity or message safety.