Email header analyzer: free, runs in your browser
Paste the raw headers of an email below and press Analyze. Everything runs in your browser as JavaScript on this page. The headers you paste are not sent to any server and are not stored. Works with headers copied from Gmail, Outlook, Apple Mail, Yahoo and any other client that can show the original message.
What it reads
- Received: each hop the message passed through, oldest first, with the time between hops. Long gaps point at queueing or greylisting; hops with an earlier time than the one before suggest clock differences.
- From, Return-Path and DKIM-Signature d=: whether the domains line up, which is what DMARC alignment means. Alignment here is approximate (a subdomain and its parent count as the same organization; there is no public-suffix list).
- Authentication-Results: the SPF, DKIM and DMARC verdicts the receiving server wrote down. We read them as written; we do not re-run the checks.
- ARC seals and their chain status, and the Message-ID format.
How to copy the headers
- Gmail: open the message, three dots, Show original, Copy to clipboard.
- Outlook: open the message, File, Properties, copy the Internet headers box.
- Other clients: look for View source, Show original or Message headers.
Gmail and Yahoo bulk-sender checklist
Google and Yahoo publish requirements for senders of bulk mail, in force since 2024. Check each against your own domain:
- SPF published for the sending domain, ending in
~allor-all. - DKIM signing switched on at your mail provider.
- DMARC record published,
p=noneat minimum (quarantineorrejectonce your senders pass). - Alignment: the From domain matches the SPF (Return-Path) domain or the DKIM
d=domain. - One-click unsubscribe (RFC 8058):
List-UnsubscribeandList-Unsubscribe-Post: List-Unsubscribe=One-Clickheaders on marketing mail. - Spam rate kept under 0.3% in Google Postmaster Tools (aim for under 0.1%).
Passing the list does not promise inbox placement; that depends on content, sending history and the receiver. Rules differ by provider and change, so read the current Google and Yahoo sender guidelines.
Next steps: check a domain's records with the free SPF, DKIM and DMARC checker; if you would rather have the records drafted, there is a flat $29 fix offer; and for weekly re-checks see DMARC monitoring (early access).
Limits
This reads only what you paste. Headers can be forged below the topmost trusted hop, so treat lower Received lines as claims. We do not fetch DNS here, do not open links, and do not judge whether a message is spam or phishing.
Related guides
- SPF, DKIM and DMARC checker: free, runs in your browser
- DMARC monitoring: weekly SPF, DKIM and DMARC re-checks (early access)
- Done-for-you company contact lists from your list of websites
- We fill your GPSR product fields for you (WooCommerce, Tidyleaf import CSV)
- Free GPSR product information sheet generator (print sheet and Tidyleaf import row)