Headers
Email header analyzer
Paste raw headers to see the delivery path with delays, SPF, DKIM and DMARC results, and whether From, Reply-To and Return-Path line up.
Free tools
Free email security tools. No account, nothing uploaded.
Three focused checks for the moment an email looks off: where it really came from, whether the sender’s domain can be spoofed, and whether a link goes where it claims to.
Tools
DNS
DMARC, SPF and DKIM checker
Look up a domain’s SPF and DMARC records and DKIM keys, with each setting explained and the 10-lookup SPF limit counted.
Links
Lookalike domain checker
Check a link or domain for homograph letters, punycode, brand typosquats, misleading subdomains and risky domain endings.
Which one
Which tool do I need?
- You received a message and doubt the sender
- Use the header analyzer. It shows whether the message really came from the domain in its From address and where replies would go.
- You want to know if a domain can be spoofed
- Use the DMARC checker on your own domain, or on the domain of a sender you are unsure about. Without an enforced DMARC policy, anyone can put that domain in the From line.
- A link looks almost right
- Use the lookalike checker before you open it. It shows which domain the link really opens and whether it imitates a known brand.
Full analysis
Not sure about the whole email? Check all of it.
This tool looks at one part of a message. The AntiBait analyzer reads the whole email: sender authentication, links and where they redirect, attachments, the text itself and the sender’s identity, and explains its verdict. You can try it for free, without creating an account.