Inspect an email header privately
Read the received server chain, reported SPF, DKIM and DMARC results and potential mismatches among From, Reply-To and Return-Path. Processing takes place entirely in your browser.
What can the header tell you?
Some Received lines can be forged by a sender. The tool does not independently validate cryptographic signatures or prove that a message is safe. Verify suspicious requests through known official channels.
Privacy
Email headers may contain names, email addresses, IPs and message identifiers. Remove sensitive details before sharing them.
Frequently asked questions
Where can I find email headers?
In Gmail, open a message, choose the three-dot menu and Show original. In Outlook, look for View message source or Internet headers. Paste the headers only, not the message body.
Does this tool verify SPF, DKIM and DMARC itself?
No. It reads the results recorded by the receiving email server in Authentication-Results. It does not recheck cryptographic signatures or DNS policies.
What does a From and Reply-To mismatch mean?
It is not always malicious, but it matters: a reply would be sent to a different domain from the sender's address. Check whether that is expected for the provider, form or forwarded message.
What do Received lines show?
Each server receiving and relaying a message usually adds a Received header. Read them from bottom to top, but remember senders may forge some lines; those added by your own provider are more trustworthy.
Are the headers sent to splet.me?
No. Analysis runs in your browser. Nevertheless, remove personal email addresses, IPs and message identifiers before sharing a screenshot.
