Email header analyzer: where did this email really come from?
Paste the full headers of an email to see the real sender, every server it passed through, delays, and whether it passed SPF, DKIM and DMARC. It runs in your browser, so the headers never leave your device.
- Free, no sign-up
- Results in seconds
- Runs privately in your browser
Simple, start to finish.
Copy the headers
Outlook: open the message, File u003e Properties u003e Internet headers. Gmail: More u003e Show original.
Paste and analyze
Everything is parsed in your browser. Nothing is uploaded.
Read the red flags
We highlight failed authentication, a Reply-To that differs from the sender, and odd routing.
Is it safe to paste headers here?
Yes. The analysis runs entirely in your browser and nothing is sent to our server.
What does u0022DMARC failu0022 mean?
The message claimed to be from a domain but couldn't prove it. Treat it as suspicious, especially if it asks for payment or a login.
Where do I report a phishing email?
Use your email client's Report Phishing button, tell your IT team, and you can forward it to the Canadian Anti-Fraud Centre.
More free tools.
Want an expert to look at your results?
Tell us what you found. An Infinity engineer, not a salesperson, will reply within one business day.
Tell us about your IT.
We answer almost every inquiry within one business day.