Paste the raw header of any suspicious message. We'll trace every server it passed through, verify its SPF, DKIM and DMARC results, flag spoofing mismatches, and score its trustworthiness — without sending anything anywhere.
Everything is parsed in this tab by JavaScript. Your header never leaves your device — no upload, no logging, no network requests at all.
Your analysis will appear here: a hop-by-hop timeline with per-server delays, authentication badges for SPF, DKIM and DMARC, mismatch warnings, and a 0–100 security score.
No header handy? Hit Load Sample Header to see a full analysis instantly.
If the analysis above raised flags — failed DMARC, mismatched reply addresses, strange routing — don't wait for the next one. Xaccel's Email Trust Verification blocks impersonation at the domain level. Checking your own domain? Run the Domain Health Check.
