IP y red

Email Header Analyzer

Paste the message headers to see which servers the email passed through and where it was delayed, what the receiver recorded for SPF, DKIM, DMARC and ARC, whether the From, Return-Path and signature domains align, and any signs of spoofing. Headers never leave your browser.

Samples: ·

Headers are parsed by JavaScript in your browser and never sent to our server — we do not see addresses, subjects or IPs. We keep only an anonymous counter (number of hops, SPF/DKIM/DMARC result codes). We do not look up any IP or domain ourselves; the links lead to our checkers if you want to run them.

Datos clave

Email headers show the path from sender to you and the checks the receiving server ran. Paste them and we break down the Received chain with delays and the SPF, DKIM and DMARC results. Parsing happens in your browser. We do not re-verify the DKIM signature: we show what your mail server recorded.

Precio
Gratis
Registro
No necesario
Procesamiento
En tu navegador: no se envía nada a nuestro servidor
Entrada
The full email headers (“Show original” / “View source”), pasted as text
Límites
No sign-up and no request limits; input is capped at 2 MB of text
Resultado
The message route hop by hop with delays, SPF/DKIM/DMARC/ARC results from the headers, address alignment, spam markers, bulk-mail signs and List-Unsubscribe, and links to check IPs and hosts
Última actualización

Online email header analyzer

Email headers are the message’s history: every server on the way adds a Received line, and the receiving server records whether the message passed SPF, DKIM and DMARC. Reading them by hand is slow — lines are folded, the order is reversed and times come in different time zones. This tool lays the Received chain out as hops in chronological order, calculates each step’s delay and the total, flags clock skew and slow hops, shows Authentication-Results, ARC and Received-SPF, the parameters of every DKIM signature, checks the From, Return-Path and DKIM d= domains against each other (DMARC alignment) and highlights spoofing signs: a Reply-To on another domain, a different address in the display name, a spam filter verdict. Everything runs in your browser.

Received hops in time order: sender, receiver, protocol and TLS, delay, clock skew
SPF, DKIM, DMARC, ARC and compauth from Authentication-Results and Received-SPF
From ↔ Return-Path ↔ DKIM d= alignment and DKIM signature details (selector, algorithm, h=, l=)
Phishing signs, SpamAssassin and Microsoft SCL/BCL, one-click unsubscribe (RFC 8058)
Paste from Gmail, Outlook, Apple Mail or drop an .eml; links to check sender IPs and domain

Cómo usar

  1. Open the message and copy its headers: in Gmail use ⋮ → Show original, in Outlook File → Properties → Internet headers (details in the guide below)
  2. Paste the text into the box or drop an .eml file — analysis starts right away
  3. Start with the verdict and the “What to look at” list, then review the hops and domain alignment

FAQ

In Gmail open the message, the “⋮” menu and “Show original”; in Outlook use File, Properties, Internet headers; in Apple Mail use View, Message, All Headers. Copy all the text and paste it here.

Read it bottom to top: the bottom line is the first server and the top one is yours. The time difference between lines shows the delay at a hop; negative values usually mean clock skew.

No. Parsing runs in your browser, and the tool log only gets counters and result codes without the message text.

They are the receiving server’s results: SPF means the sending IP is allowed by the domain, DKIM means the signature is valid, DMARC means at least one check aligned with the From domain. We show them from the headers.

Passing authentication does not guarantee delivery: IP and domain reputation, content and recipient behaviour count too. Check the IP against blacklists and the X-Spam markers in the report.

PromoPilot frente a alternativas: comparación

Comparamos solo lo que está confirmado en las páginas de cada servicio. Donde no pudimos confirmar un dato, la celda muestra "—".

Parámetro PromoPilot MxToolbox Email Header Analyzer Google Admin Toolbox Messageheader
Received hops with delays ✓ ✓ shows hop delays ✓ finds delivery delays and normalizes hop times
SPF / DKIM / DMARC from the headers ✓ Anti-spam results; SPF and DKIM are not named on the page SPF/DKIM evaluation is not claimed on the page
Parsed without sending to a server ✓ Not stated on the page Not stated on the page
Domain DNS record checks ✗ (separate checkers exist) — —

Desplaza la tabla hacia los lados

Dónde somos más débiles: we do not re-verify the signature or query the domain’s DNS in this tool; SPF, DKIM and DMARC details live in separate checkers.

Cuándo elegir PromoPilot: When you want to see why a message was late, where it came from and whether it passed checks without sending headers to someone else’s service. For re-verifying the signature and a tree of DNS lookups you need other tools.

Comprobado el: . "—" significa que no está confirmado en la página oficial; las condiciones y los precios cambian, así que consulta los sitios de cada servicio.

Promoción con enlaces en cascada para tu sitio Bono de $30Backlinks 5→50→5000 en más de 100 plataformas. Desde $30 para empezar, más un bono de $30 para nuevos usuarios.