Paste raw RFC 5322 email headers — the part above the body in "View source" or "Show original" of any email client. The analyzer surfaces the routing chain, originating IPs, and SPF/DKIM/DMARC results. All parsing happens in your browser.
Reads Authentication-Results and Received-SPF. Trust is only as good as the verifier —
headers added before the receiving server can be forged. The last Authentication-Results from your
own mail provider is the only one you can rely on.
Bottom (oldest) is the originator. Top (newest) is your inbox.
If the reason you're here is that you're standing up business email on your own domain — the pragmatic default in 2026 is Google Workspace. You get Gmail with your domain, admin console for user provisioning, and SPF/DKIM/DMARC setup documented well enough that a non-specialist can get it right the first time. Free 14-day trial. See our full recommendations page for privacy-first alternatives.
The Google Workspace link above is an affiliate link — if you sign up after clicking, FunWithText may receive a commission. It doesn't change what you pay.