Sender authentication
SPF, DKIM and DMARC results, and whether the signature belongs to the domain you see.
Advanced tool · Free
Is this email a scam? Let's take it apart.
Paste the original message or drop an .eml file. The analyzer reads the headers, links, attachments and wording the way a security analyst would, and explains every warning sign.
Advanced tool · Free
Your message never leaves your device
The analysis runs entirely in your browser. Nothing is uploaded, stored or sent to us, so you can safely check internal or confidential emails.
Analyzer
Paste the message
What it checks
Seven layers, like a real investigation
Identity tricks
Reply-To and Return-Path redirection, a fake address hidden in the display name, an organisation name on a free mailbox.
Look-alike domains
Domains that imitate known brands: swapped letters (rn/m, 0/o), added words, international characters.
Hidden links
Link text that differs from the real destination, the “@” trick, IP addresses, short links, high-abuse endings.
Dangerous attachments
Executables, disguised double extensions, reversed file names, HTML pages and macro documents.
Pressure language
Urgency, threats, requests for passwords or codes, payment changes, prizes and secrecy, in Arabic and English.
Server route
Every mail server the message passed through, and dates that don't add up.
Get the original
How to copy the original message
Pasting only the visible text works too, but without headers the sender can't be verified.
Gmail
Open the message → ⋮ (More) → Show original → Copy to clipboard. Or Download original to get an .eml file.
Outlook (desktop)
Open the message → File → Properties → copy “Internet headers”. Or drag the message to your desktop and open it as a file.
Outlook on the web
Open the message → … → View → View message source → select all and copy.
Apple Mail / Thunderbird
View → Message → Raw Source (Apple Mail), or View → Message Source (Thunderbird), then copy.
An honest note
This tool spots the warning signs analysts look for; it cannot prove a message is safe. A clever attack from a hacked genuine account can pass every technical check, which is why people need training as well as tools.
Want this level of judgement across your whole team?
Our awareness programmes teach staff to read messages the way this analyzer does.
Talk to us
Need an expert to look at a real incident?
If a suspicious message reached your organisation, we can investigate and help you respond.