Is this email fake?
That invoice, password reset, or "urgent request" sitting in your inbox: paste its headers below and get a plain-English read on whether it really came from who it says.
You can also drag a saved email file anywhere onto this page. Either way the file is read locally in your browser and never uploaded, so even a malware-laden message can't hurt anyone here: its attachments are never opened or executed.
Analysis happens entirely in your browser; the pasted headers are never uploaded anywhere. The only network requests are DNS lookups of the sender's domain. Headers reveal how a message travelled, not what it asks of you: a technically genuine email can still be a scam if the account behind it was hacked.
How to get an email's headers
Every email carries hidden delivery records. Mail apps hide them, but they're two clicks away:
- Gmail: open the message → three-dot menu (top right of the message) → Show original → Copy to clipboard.
- Outlook (web): open the message → three-dot menu → View → View message source, then copy everything.
- Outlook (desktop): open the message → File → Properties → copy the Internet headers box.
- Apple Mail: open the message → View → Message → All Headers, then copy them.
- Yahoo Mail: open the message → three-dot menu → View raw message, then copy everything.
Paste the whole thing above. Extra content below the headers is ignored automatically.
What this checks
Your own mail provider already ran cryptographic checks (SPF, DKIM, DMARC) when the message arrived and wrote the verdicts into the headers. This tool translates those verdicts into plain English, then looks for the classic scam patterns: replies silently routed to a different address, a trusted company's name on a free webmail account, lookalike characters in the domain, and whether the claimed sender's domain even protects itself against spoofing.