Email Intelligence & Header Analysis
Where a message really came from — and how much of that can be trusted.
Paste an email’s original source or its headers. Read the delivery route hop by hop, the SPF, DKIM and DMARC verdicts the receiving servers recorded, every IP address with the part it played, and the sender, link and attachment tricks phishing relies on — each finding with its evidence and its limits.
What you can learn
- Which server actually handed the message over, and which records the sender could have written
- Whether the visible From address was authenticated, and by whom
- Every IP address, classified, with optional registry, network and Tor lookups
- Lookalike domains, mismatched reply addresses, links that lie, risky attachments
The message is analysed in your browser. Only if you choose to run lookups are the IP addresses and domain names — never the message — sent to our server.