Free Email Header Analyzer

Paste raw email headers and get the story: did SPF, DKIM and DMARC pass, what path did the message take, and does anything look spoofed.

Frequently asked

How do I get an email's raw headers?

Gmail: three-dot menu → "Show original". Outlook: File → Properties → Internet headers. Apple Mail: View → Message → All Headers. Copy everything above the message body and paste it here.

What are the spoofing red flags?

Authentication-Results showing spf=fail or dmarc=fail, a From domain that differs from the Return-Path and DKIM d= domain, and Received chains that originate somewhere implausible. Any of these on a "bank" email means don't click.

Related tools

  • Punycode Converter · Convert Unicode domains to xn-- punycode and back · and check whether a domain mixes scripts the way phishing lookalikes do.
  • robots.txt Tester · Paste your robots.txt and test any URL against it · per user-agent, including AI crawlers · using the same longest-match rules Google applies.
  • User-Agent Parser · Paste a User-Agent string · from logs or analytics · and identify the browser, OS, device class, and whether it's a known bot or AI crawler.

Run a full security scan →