Email Header Analyzer
Paste the raw headers of an email to see exactly how it was delivered — the sending path and hop delays, and whether it passed SPF, DKIM and DMARC. Free, runs on our server, nothing stored.
How to read an email header
Every email carries a block of headers that records its journey. As each mail server
handles the message it stamps a Received line at the top, so the list reads
newest-first — the bottom-most Received is where the message started. The
Authentication-Results header shows whether the receiving server could verify the sender
with SPF, DKIM and DMARC. Reading these together
tells you where a message really came from, how long it took at each hop, and whether it was properly
authenticated — the quickest way to investigate a suspected phishing or spoofing attempt. To check the
sending domain's own records, use the SPF/DKIM/DMARC Checker.
More PAYATE tools
Frequently asked questions
What does the email header analyzer show?
It breaks the raw headers of an email into readable parts: the core fields (From, To, Subject, Date, Message-ID), the SPF, DKIM and DMARC authentication results, and the full chain of mail servers the message passed through (the Received hops) with the delay added at each step and the total delivery time.
Where do I find an email's raw headers?
In Gmail open a message, click the three-dot menu and choose Show original. In Outlook open the message, then File → Properties and copy the Internet headers. Apple Mail: View → Message → All Headers. Paste everything into the box above.
How do I read the delivery path?
Email servers add a Received header at the top as they handle the message, so the last hop is the origin. This tool reverses them into chronological order — sender first, your mailbox last — and shows how long each hop took, which helps you spot delays or a suspicious relay.
Is my email content uploaded anywhere?
No. The headers are parsed on the server to produce the result for that request and nothing is stored. To verify a domain's records directly, use the SPF/DKIM/DMARC Checker.