Paste a suspicious email's full headers and get a plain-English readout: the real sending path hop by hop, SPF/DKIM/DMARC results, and the classic spoofing red flags — analyzed entirely in your browser.
The From line is trivially fakeable — the headers are where the truth lives. SPF says whether the sending server was allowed to send for that domain; DKIM says the message wasn't altered; DMARC says what the domain owner wants done with failures. Analyzed locally — the email never leaves your machine. More free tools: bvtech.org/tools.
