GoodPing › Tools › Email Header Analyzer

Email Header Analyzer

Paste the raw headers of an email and see exactly how it travelled: every server it passed through, how long each hop took, and whether it passed SPF, DKIM and DMARC. Useful for tracing delays and spotting spoofed mail.

In Gmail: open the message → ⋮ → "Show original". In Outlook: File → Properties → Internet headers.

How to read a delivery path

Email headers record the journey in reverse: the newest server is at the top, the original sender at the bottom. This tool flips them into travel order so hop 1 is where the message started. The delay column is the gap between one server stamping the message and the next — a large jump is where a message got stuck, usually in a greylist or a queue.

SPF, DKIM and DMARC in the headers

The receiving server writes its verdict into Authentication-Results. SPF checks the sending server was allowed to send for the domain; DKIM verifies a cryptographic signature; DMARC ties them together against the visible From address. A spoofed phishing email typically fails DMARC — that is the single most telling line. If your own mail is failing any of them, the email health check shows what to fix in DNS.