Protocol Threat Inspector

Email Header Analyzer — authentication, spoofing checks, and hop-by-hop delivery trace
← DNS SOC diagnostics MODULE E
What is this? [legend]

Paste the raw headers of an email — everything from Received: down to Subject: — and this parses the authentication verdicts, the hop-by-hop delivery chain, and common spoofing indicators, entirely in your browser.

Nothing is uploaded anywhere. Parsing happens client-side; the header text never leaves your browser. This matters — email headers can contain sensitive routing and identity information.

Don't know where to find raw headers? In Gmail: open the email → ⋮ menu → "Show original". In Outlook: File → Properties → "Internet headers". Copy the whole block and paste it below.

Message Summary

— paste headers and analyze —

Authentication Results

— paste headers and analyze —

Sender Identity Check

— paste headers and analyze —

DKIM Signatures

— paste headers and analyze —

Received Chain (Delivery Hops)

— paste headers and analyze —

Other Headers of Interest

— paste headers and analyze —

All Parsed Headers

— paste headers and analyze —
"By way of deception, thou shalt make war"
PrivacyTerms of UseDisclaimer
All parsing is run client-side in your browser. Header text you paste is never sent to, logged by, or stored on any server operated by us — it exists only in your browser's memory for this session. This tool is provided "as is," for informational and diagnostic purposes only, with no warranty of accuracy or completeness, and is not a substitute for a professional security assessment. Received-header and Authentication-Results parsing is best-effort — formats vary across mail server vendors and are not fully standardized. Not affiliated with, endorsed by, or sponsored by any third party referenced in its output; all trademarks are the property of their respective owners and are used solely for identification.

© 2026 Xaephyr Reliance Group Inc. All rights reserved.