- \n
- InboxAlly<\/strong>: Best all-rounder<\/li>\n\n\n\n
- Google Admin Toolbox Messageheader<\/strong>: Best for delays<\/li>\n\n\n\n
- MXToolbox<\/strong>: Best for resolving DNS problems<\/li>\n\n\n\n
- Microsoft Message Header Analyzer<\/strong>: Best for Outlook and Exchange<\/li>\n\n\n\n
- EasyDMARC<\/strong>: Best for whole-message analysis<\/li>\n\n\n\n
- PowerDMARC<\/strong>: Best free option for learning<\/li>\n<\/ul>\n\n\n\n
What’s Aactually in a Header?<\/strong><\/h2>\n\n\n
\n![\"Best](\"https:\/\/marketingsatchel.com\/wp-content\/uploads\/2026\/08\/email-correspondence-mail-message-concept-scaled.jpg\")
<\/figure><\/div>\n\n\nEssentially three important parts. You can easily ignore the rest.<\/p>\n\n\n\n
Authentication results.<\/strong> SPF, DKIM, and DMARC, each one a pass, a fail, or nothing at all. The receiving server writes its verdict into a line called Authentication-Results. If you learn one field, learn this one.<\/p>\n\n\n\n
Alignment.<\/strong> Contrary to what some people think, SPF doesn’t check the From address at all. It checks the envelope sender in Return-Path, which your recipient never sees. For instance, a scammer can register a throwaway domain, authorize their own server on it, pass SPF, and still put your CFO’s name in the From line. Nothing failed. Everything is wrong. DMARC exists to close that door by insisting the two domains match.<\/p>\n\n\n\n
The Received chain.<\/strong> Every server adds its line at the top, so the list runs backwards in time. The bottom is where the message started; the top is the last stop before your inbox. Subtract each timestamp from the one below it, and you’ll find the server that delayed your email by twenty minutes.<\/p>\n\n\n\n
Length matters too. Normal mail passes through a handful of servers. If the chain scrolls forever, you’ve got a forwarding loop, and Exchange gives up after 30 hops by default, well under the 100 or so RFC 5321 suggests.<\/p>\n\n\n\n
Need the raw text? <\/p>\n\n\n\n
- \n
- Gmail: three dots, then Show original. <\/li>\n\n\n\n
- Outlook desktop: open the message in its own window, File, then Properties. <\/li>\n\n\n\n
- Apple Mail: View, Message, All Headers.<\/li>\n<\/ul>\n\n\n\n
1. InboxAlly\u00a0<\/strong><\/h2>\n\n\n
\n![\"InboxAlly\"](\"https:\/\/marketingsatchel.com\/wp-content\/uploads\/2026\/08\/Captura-de-pantalla-2026-08-28-154638.png\")
<\/figure><\/div>\n\n\nInboxAlly’s email header analyzer<\/a> parses everything in your browser. Your header never gets uploaded anywhere, and that’s something you should care about, even if it doesn’t sound like a big deal at first. More on that below.<\/p>\n\n\n\n
There’s one exception, and I like that they disclosed it instead of burying it. Instead of the header, the tool sends the originating IP to a public resolver so it can check reverse DNS, confirm the record resolves both ways, and name the network that owns it. A sending IP with no working reverse DNS is a genuine problem better caught sooner rather than later.<\/p>\n\n\n\n
Here’s what you get back:<\/p>\n\n\n\n
- \n
- Authentication.<\/strong> SPF, DKIM, and DMARC as plain pass, fail, or missing labels.<\/li>\n\n\n\n
- Alignment.<\/strong> From, Return-Path, and the DKIM signing domain, side by side.<\/li>\n\n\n\n
- Delivery path.<\/strong> Every hop in the right order, with the delay at each one.<\/li>\n\n\n\n
- Blocklist check.<\/strong> One click on the sending IP.<\/li>\n<\/ul>\n\n\n\n
That last one saves me a step almost every time. After reading a header, my next question is usually whether the IP is listed somewhere, and having it right there is much easier than opening a second tool.<\/p>\n\n\n\n
Who it’s best for:<\/strong> Anyone who wants authentication, alignment, and routing on one screen without handing their header to a stranger.<\/p>\n\n\n\n
Price:<\/strong> Free, no account.<\/p>\n\n\n\n
2. Google Admin Toolbox Messageheader<\/strong><\/h2>\n\n\n
\n![\"Google](\"https:\/\/marketingsatchel.com\/wp-content\/uploads\/2026\/08\/Captura-de-pantalla-2026-08-28-154707.png\")
<\/figure><\/div>\n\n\nGoogle’s own parser<\/a>. When somebody tells me their email arrived late, this is where I go first, because it draws the hops as a colour-coded timeline and points straight at the server responsible. I’m not getting drowned in timestamps, squinting at code not meant for me.<\/p>\n\n\n\n
It’s somewhat narrow since it only checks timing. It won’t tell you if SPF or DKIM passed, and it won’t catch a spoofed From address. It also doesn’t parse in your browser. Your header goes to Google’s servers to get read instead. If that’s fine with you, it’s still the quickest way to find which server delayed a message.<\/p>\n\n\n\n
It’s also the one I’d give to a non-technical colleague. You don’t need to know what Authentication-Results means to look at the timeline and see which hop took too long.<\/p>\n\n\n\n
Who it’s best for:<\/strong> Workspace admins fixing a routing problem inside Google’s own setup.<\/p>\n\n\n\n
Price:<\/strong> Free, no login.<\/p>\n\n\n\n
3. MXToolbox\u00a0<\/strong><\/h2>\n\n\n
\n![\"MXToolbox\u00a0\"](\"https:\/\/marketingsatchel.com\/wp-content\/uploads\/2026\/08\/Captura-de-pantalla-2026-08-28-154817.png\")
<\/figure><\/div>\n\n\nMXToolbox<\/a> does more than parse; it puts authentication results, relay info, and blacklist status in one report, then keeps its DNS lookups, DMARC checks, and MX diagnostics a click away.<\/p>\n\n\n\n
That closeness is what makes it good, and it’s why MXToolBox<\/a> has remained popular over the years. I’ve rarely finished a header investigation without needing to go check a record.<\/p>\n\n\n\n
The free analyzer covers one-off jobs fine. Ongoing monitoring means Delivery Center, which includes inbox placement analysis, complaint reporting, and adaptive blacklist monitoring starting at $129 a month. That’s reasonable for a company with a full-on mail team but a lot of money for something you’ll open twice a month as a single person running cold outreach.<\/p>\n\n\n\n
Who it’s best for:<\/strong> System admins and marketers who need DNS records, blacklist status, and relay info in the same report as the header.<\/p>\n\n\n\n
Price:<\/strong> Free header analyzer. Delivery Center from $129\/month.<\/p>\n\n\n\n
4. Microsoft Message\u00a0<\/strong><\/h2>\n\n\n
\n![\"](\"https:\/\/marketingsatchel.com\/wp-content\/uploads\/2026\/08\/Captura-de-pantalla-2026-08-28-155016.png\")
<\/figure><\/div>\n\n\nMicrosoft’s parser <\/a>is open source on GitHub under an MIT licence, and it comes two ways. There’s a standalone web page that needs no permissions, and there’s an Outlook add-in that reads headers straight out of whatever message you have open, on desktop and on iOS and Android.<\/p>\n\n\n\n
The add-in is the good part. It’s also the reason your IT team may have said no.<\/p>\n\n\n\n
It requires ReadWriteMailbox access, and the developer explains why right in the project README: the method it needs to read one single property doesn’t come at any lower permission level. He adds that he’d ask for less if he could. Installing it usually goes through an Exchange admin, so budget a conversation.<\/p>\n\n\n\n
One more thing. Older Microsoft pages still list the header analyzer as part of the Remote Connectivity Analyzer, but that copy was pulled years ago in favour of the open-source build.<\/p>\n\n\n\n
Who it’s best for:<\/strong> Outlook and Exchange admins, especially anyone reading headers on a phone.<\/p>\n\n\n\n
Price:<\/strong> Free.<\/p>\n\n\n\n
5. EasyDMARC\u00a0<\/strong><\/h2>\n\n\n
\n![\"EasyDMARC\"](\"https:\/\/marketingsatchel.com\/wp-content\/uploads\/2026\/08\/Captura-de-pantalla-2026-08-28-155052.png\")
<\/figure><\/div>\n\n\nThis one works differently, and I think it’s underrated. Instead of pasting a header, you send your email to a generated address, or upload an EML file if you prefer. It then looks at the whole message rather than just the routing data.<\/p>\n\n\n\n
The report covers a lot:<\/p>\n\n\n\n
- \n
- Authentication and DNS.<\/strong> Results plus a look at your actual records.<\/li>\n\n\n\n
- Blacklist status.<\/strong> Same idea as MXToolbox’s check.<\/li>\n\n\n\n
- SpamAssassin score.<\/strong> Useful for problematic content.<\/li>\n\n\n\n
- Content and preview.<\/strong> Your email’s structure, plus how it renders.<\/li>\n\n\n\n
- Compliance.<\/strong> Right down to whether your unsubscribe link is where it should be.<\/li>\n<\/ul>\n\n\n\n
When the question is why a whole campaign is getting filtered, that gets you much further than a hop timeline will.<\/p>\n\n\n\n
There is one caveat, however. Since you’re sending a live message to a third party, you’ll get nudged toward a DMARC<\/a> trial constantly. For investigating a suspicious email somebody sent you, use something less obnoxious.<\/p>\n\n\n\n
Who it’s best for:<\/strong> Marketers debugging whole campaigns at a time.<\/p>\n\n\n\n
- Blacklist status.<\/strong> Same idea as MXToolbox’s check.<\/li>\n\n\n\n
- Alignment.<\/strong> From, Return-Path, and the DKIM signing domain, side by side.<\/li>\n\n\n\n
- Authentication.<\/strong> SPF, DKIM, and DMARC as plain pass, fail, or missing labels.<\/li>\n\n\n\n
- Google Admin Toolbox Messageheader<\/strong>: Best for delays<\/li>\n\n\n\n
![\"PowerDMARC\u00a0\"](\"https:\/\/marketingsatchel.com\/wp-content\/uploads\/2026\/08\/Captura-de-pantalla-2026-08-28-155114.png\")
<\/figure><\/div>\n\n\n![\"Best](\"https:\/\/marketingsatchel.com\/wp-content\/uploads\/2026\/08\/Captura-de-pantalla-2026-08-28-155753.png\")
<\/figure><\/div>\n\n\n