Free, nothing is stored
Email header analyzer
Paste a raw message header to trace the delivery path and read the SPF, DKIM and DMARC results for that message. Nothing is stored.
Delivery path ( hops)
Total delay:-
from by
· +
Direct answer
How do you read an email header?
An email header is the route sheet of a message. The Authentication-Results line says whether SPF, DKIM, and DMARC passed for that specific email. Received lines list each server that handled it, newest first. Paste the raw header above. In Gmail, open the message, choose Show original, and copy the whole block. The header is not stored.
- SPF in a header is the result for the IP that handed the message to that receiver, not a general grade for the domain.
- DKIM-Signature shows the selector and the domain that signed. A pass on a different domain than the From address fails DMARC alignment.
- Received lines are added at the top. The first one is the last server. The last one is closest to the sender.
- A header from one mailbox does not describe delivery to every other mailbox. Gmail and Outlook can disagree on the same message.
Questions people ask
Where do I copy the raw header in Gmail?
Open the message, click the three dots, and choose Show original. Copy everything on that page, including Authentication-Results and the Received lines. A forwarded copy often loses the original results, so use the message as it arrived.
Why did SPF pass and DMARC fail?
SPF passed for the envelope domain, and that domain does not match the visible From domain. DMARC requires alignment. This is common when a sending tool uses its own return-path and the From is your domain, unless the tool also signs DKIM on your domain.
What does softfail mean?
Softfail is the SPF result for ~all. The IP was not listed, and the record asked receivers to treat that as suspicious rather than a hard failure. It is not a pass.
Does analyzing a header change anything?
No. The analyzer only parses the text you paste. It does not contact the sending server and it does not store the header.
The records are only half of inbox placement.
Once SPF, DKIM, and DMARC pass, a cold domain still needs a slow sending history. iSend warms the domain and sends with the same authentication these tools just checked.