All tools
Email Header Analyzer
Paste raw email headers. Reconstructs the delivery path with per-hop timing and flags spoofing indicators: display-name tricks, Reply-To redirects, envelope mismatches, punycode senders.
Paste the full original headers. In Gmail use "Show original", in Outlook "View message source".
SPF, DKIM and DMARC results below are read back from what the receiving mail server recorded. They are not re-checked here, because that needs DNS and nothing on this page talks to the network. A forged header block can claim anything.
Paste headers above to start, or try the sample.
Everything here runs in your browser. Nothing leaves this tab.