Email header analyzer
Paste an email's headers to see whether it passed SPF, DKIM and DMARC, the route it took from server to server with each delay, and warning signs such as a reply address on another domain.
- No cost
- No sign-up
- No email
- No Google sign-in
- No subscription
- Unlimited – runs in your browser
How to copy an email's headers
- Gmail: open the email, click the three dots ⋮ → Show original, then Copy to clipboard.
- Outlook (desktop): open the email, File → Properties, and copy the "Internet headers" box. In Outlook on the web: ⋯ → View → View message details.
- Apple Mail: View → Message → All Headers.
- Yahoo Mail: ⋯ → View raw message.
What the analyzer shows
Is it genuine?
The SPF, DKIM and DMARC results the receiving mail server recorded, and what each means in plain English.
The route
Every server that handed the email on, oldest first, with the time each hop took, so you can find where a slow email was held up.
Warning signs
A reply address on a different domain, a bounce address that doesn't match, failed checks and spam filter scores.
Spotting a fake invoice or phishing email
The "From" name and address are easy to fake; the headers are much harder. Be wary when DMARC fails, when replies go to a different domain from the sender (a classic trick in invoice fraud: the email looks like your supplier, but answers go to the scammer), or when the first server in the route has nothing to do with the company. If in doubt, phone the sender on a number you already have, never one in the email. In the UK you can forward suspicious emails to report@phishing.gov.uk.
Why your own emails land in spam
Send a test email to a Gmail or Outlook address, open the headers and paste them here. If SPF, DKIM or DMARC isn't "pass", fix your domain's records with our SPF checker, DKIM checker and DMARC checker. Since 2024 Gmail and Yahoo expect all three from anyone sending in volume.
Privacy
Headers can include email addresses and IP addresses, so the analyzer runs entirely in your browser: nothing you paste is sent to us or stored.
Frequently asked questions
Is the email header analyzer free?
Yes. No sign-up, no email and no limit, because it runs in your browser.
Is it safe to paste email headers here?
Yes. The headers are read in this browser tab only and never uploaded or stored. Headers don't contain the email's text or attachments.
What does DMARC pass mean?
The email really came from the domain shown in the From address: it passed SPF or DKIM for that same domain. A fail means it couldn't prove that.
Why does an email take hours to arrive?
The route table shows the time between each server. A long gap usually means a spam filter held it, a server was busy, or a sender's queue retried after a temporary refusal.
More free SEO tools
Free SEO check
Full single-page audit: Google readiness, AI search, speed, security and local SEO.
Website crawler
Crawl up to 10,000 pages and download every title, heading, link and price as Excel or CSV.
AI SEO checker
Can ChatGPT, Claude, Perplexity and Google AI Overviews read and cite your site?
Website audit
Crawl up to 250 pages for broken links, duplicate titles and orphan pages.
Backlink checker
See which websites link to any site – .co.uk, .com or anything else – and which link to your competitor but not you.
Domain authority checker
Authority scores for up to 100 websites at once, with links and global rank.
Redirect checker
Follow any address hop by hop: 301s, 302s, chains, loops and meta refreshes.
HTTP header checker
Every response header for any address, with what each one means for SEO.
Website down checker
Is a website down for everyone or just you? Live status and response time.
Open Graph checker
See how any page looks when shared on Facebook, LinkedIn, WhatsApp and X.
Hreflang checker
Check language and country tags, return links and x-default on any page.
Heading checker
See any page's H1 to H6 outline and fix missing, double or skipped headings.
Alt text checker
Find images with missing, empty or weak alt text, and linked images with no words.
Canonical checker
Find a page's canonical URL, test it loads, and spot noindex tags and headers.
Website hosting checker
Who hosts a website? The hosting company, IP address, CDN and server location.
SSL checker
Is a site secure? Certificate expiry, https redirects, HSTS and mixed content.
UTM link builder
Tracking links for Google Analytics: source, medium and campaign, ready to copy.
URL slug generator
Turn titles into short, clean, SEO-friendly page addresses.
Case converter
Sentence case, Title Case, UPPER, lower, camelCase and more in one click.
Favicon generator
favicon.ico, Apple and Android icons from letters or your logo, with the HTML.
Hreflang generator
Correct hreflang tags for every language and country version, as HTML or a sitemap.
Website technology checker
What is a site built with? CMS, theme, plugins, analytics, hosting and email.
DNS lookup
A, MX, TXT, NS and other records, plus SPF and DMARC email checks.
DNS propagation checker
Has your DNS change spread? Ten public DNS services and your own name server.
Reverse DNS lookup
The hostname (PTR record) of any IP address, and whether it points back.
Meta tag checker
Every meta tag on a live page, with a Google preview and plain fixes.
MX lookup
Which mail servers receive a domain's email, in priority order, and who provides them.
SPF checker
Check an SPF record, every include and the 10-DNS-lookup limit.
DMARC checker
Look up a DMARC policy tag by tag and see if it stops fake email.
DKIM checker
Find DKIM keys under common selectors or yours, with key size and type.
Domain age checker
How old is a website? Registration and expiry dates for up to 100 domains.
WHOIS lookup
Who a domain is registered with, when it expires and its name servers.
Competitor comparison
Your site against up to two competitors, side by side.
SEO monitoring
A free weekly re-check with a score history graph.
Title tag checker
See your title and description in pixels, exactly as Google cuts them.
robots.txt tester
Paste your rules and test any URL against Googlebot or AI crawlers.
llms.txt generator
Create an llms.txt file that gives AI assistants a map of your site.
Mobile-friendly test
Check your page works on phones – Google's own test closed in 2023.
Broken link checker
Crawl your whole site and find every dead link and broken image.
Schema checker
Validate the structured data on any page or pasted code against Google's rich result rules.
Page speed checker
Core Web Vitals from real Chrome users plus a Lighthouse test.
Sitemap checker
Check your XML sitemap is found, valid and listed in robots.txt.
Security headers checker
HTTPS, HSTS and the headers browsers use to protect visitors.
Local SEO checker
LocalBusiness markup, contact details and map signals for UK businesses.
Meta tag generator
Title, description, canonical, robots and social tags, ready to paste.
Open Graph generator
Control how your link looks on Facebook, LinkedIn, WhatsApp and X.
XML sitemap generator
Find your pages and download a valid sitemap.xml.
robots.txt generator
Block AI training bots while staying visible in AI search.
Local business schema generator
LocalBusiness JSON-LD for Google and AI assistants.
Long-tail keyword generator
Turn one topic into dozens of winnable search phrases.
Blog title generator
Headline ideas measured to fit Google's results.
Word counter
Words, characters, reading time, readability and keyword density.
Keyword difficulty checker
How hard is page one? We grade the pages that rank now.
Plagiarism checker
Find copies of your text across the web – no word limit.
Anchor text checker
Grade every link on a page and generate better anchors.
Local search checker
See Google results as they appear in any UK town.
AI title & description writer
AI reads your page and writes titles and descriptions that fit Google.
Bulk SEO checker
Score up to 20 websites at once and download a CSV.
Redirect map generator
301 rules for .htaccess, Nginx, Cloudflare and more.
SEO ROI calculator
What a better Google position could earn you.
Image compressor
Shrink photos and convert to WebP in your browser – no upload.
QR code generator
QR codes that never expire, as PNG or SVG.
Google review link generator
A one-tap review link, QR code and printable card.
Privacy policy generator
A UK GDPR privacy policy and cookie wording for your site.
Website report
Authority, rank, linking sites, age and hosting for any domain.
SEO score badge
Show your score on your site – it updates itself weekly.
Rank tracker
Track your Google positions for every search, by country, from your own Search Console data.
SEO content editor
Write with a live score, related terms and questions taken from the pages that rank.
Toxic backlink checker
Spot spam links, check your anchor text mix and build a disavow file.
Competitor ad checker
See which ad platforms a competitor uses and open every ad they run.
Uptime monitor
Checks your site every 15 minutes and alerts you the moment it goes down or slows.
Website analytics
Cookie-free visitor stats: live visitors, pages, sources and conversions.
Brand monitoring
Find mentions of your business, unlinked mentions and copied content.
WordPress SEO fixer
A free plugin that fixes missing alt text, descriptions, extra H1s and broken links.
Accessibility checker
Test any page for WCAG problems: alt text, labels, link names, zoom and headings.
Run a free SEO check now
About 50 checks covering Google, AI search, speed, security and local SEO. No sign-up.
Want the fixes done for you? XKey is made by IceWork, a web studio in Blackpool. IceWork builds fast, search-ready websites – a 3-page site including domain and a year's hosting is £350 all in.