Email header analyser
Paste an email's headers to see who really sent it, the route it took, and whether it passed SPF, DKIM and DMARC. Everything happens in your browser.
Did it pass?
Passing doesn't make an email safe: a scammer's own domain can pass all three. They show which domain really sent it, so check that it's the one you expect. Only the results your own mail server added count; the analyser reads the topmost ones, because lower ones can be written by the sender.
Who sent it
The route, oldest first
DKIM signatures
"Check this key" opens the domain security check for that domain and selector. Only those two are sent, and only if you click.
Every header ()
| Name | Value |
|---|