Email header analyzer
Paste an email’s raw header and see the Received chain, the SPF/DKIM/DMARC verdicts, and the spoofing signals.
Authentication
Is the IP that delivered the email authorized by the Return-Path domain’s DNS?
Does the domain’s cryptographic signature validate the content?
Does the From domain require and pass aligned authentication?
Signals
Delivery chain (Received)
| # | from | received by | proto | time (UTC) | Δt |
|---|
No Received headers to show.
Summary
| From | — |
|---|---|
| Return-Path | — |
| Reply-To | — |
| To | — |
| Subject | — |
| Date | — |
| Message-ID | — |
⚠ Trust boundary: only the topmost Authentication-Results — written by your own email provider — is trustworthy. Everything below it, including the earliest Received lines, can be forged by the sender.
This tool interprets the verdicts already present in the header; it cannot verify SPF/DKIM by itself — that would require DNS lookups and cryptographic validation at the receiving server.
🔒 100% in-browser. No data is ever sent to any server.
← Back to tools