Email header
Paste an email header to see the path the message took, any delays, and the results for SPF, DKIM, and DMARC.
About this tool
Every email message has a header containing details about who sent it and which servers it passed through. The header is not normally visible, but every email client can display it.
The tool reads the Received lines and shows the path from sender to recipient, with the time between each hop. A long delay shows where the email got held up. You can also see From, Return-Path, and Message-ID, and whether the recipient approved SPF, DKIM, and DMARC.
The header is parsed entirely in your browser and is never sent to us. This is useful when you suspect a fraudulent message: if SPF or DMARC shows fail, the message most likely did not come from the sender it claims to be.
Frequently asked questions
How do I find the email header?
In Gmail: open the message, click the three dots, and select Show original. In Outlook: File, Properties, the Internet headers box. In Apple Mail: View, Message, All Headers.
Can I trust the Received lines?
The lines added by your own email server, at the top, are reliable. Further down, a sender may have inserted fake lines.
Why do From and Return-Path differ?
This is common when email is sent via a newsletter or bulk mailing service. It is not a problem in itself, but DMARC requires that at least SPF or DKIM aligns with the domain in From.