Email Header Analyzer
Become a Phishing Detective. Extract the hidden code behind any email to see exactly who sent it and if it passed security checks.
Paste Email Headers
Paste the raw headers of a suspicious email below. This tool runs entirely in your browser; your email data is never sent to our servers.
Paste email headers and click analyze to see the authentication results.
How to find Email Headers
Every email contains hidden "headers" that show the route it took across the internet.
- Gmail: Open the email, click the three dots (More) in the top right, and select "Show original".
- Outlook: Open the email, click the three dots, select "View", then "View message details".
- Apple Mail: Open the email, click View > Message > All Headers.
Copy the block of text at the top and paste it into the tool.
The "Holy Trinity" of Email
It is incredibly easy for hackers to fake the "From" address to look like your boss or your bank. Modern email uses three protocols to stop this:
- SPF: A list of IP addresses allowed to send mail for a domain.
- DKIM: A cryptographic signature ensuring the email wasn't tampered with in transit.
- DMARC: The boss rule. It tells the receiving server to reject the email if SPF or DKIM fail.