Email Inspector

Paste raw headers or the full email source to inspect sender identity, mail authentication, transport hops, sender-domain DNS, extracted URLs and IPs, and obvious review-worthy mismatches.

Open Phishing Check How to get raw headers

Analyze

Paste raw headers or full email source

The analyzer does not send mail, visit links, or persist the submitted text by default.

Best results come from the original raw message or header block, not a forwarded copy or screenshot. If you need help finding that in Gmail, Outlook, Apple Mail, or mobile clients, open the raw email header guide.

Current checks

Sender identity review Compare `From`, `Reply-To`, and `Return-Path` so misalignment is visible fast.
Mail authentication Read SPF, DKIM, DMARC, and upstream spam verdict clues from supplied headers.
IOC extraction Pull URLs, domains, IPs, and email addresses from the supplied source.
Mail flow timeline Reconstruct the Received path, show hop delays, and call out suspicious timestamp gaps.
Sender DNS advisor Check MX, SPF, DMARC, DKIM selector, and BIMI publication for the sender domain, then draft the records that need fixing.

Run the inspector to populate sender identity, authentication results, extracted IOCs, and first-pass phishing or spam signals.