Skip to content
ValidatesOnline

Email Header & BEC Analyzer

Explain From, Reply-To, Return-Path, and SPF/DKIM/DMARC results from Authentication-Results.

Local execution · source content not transmitted · JavaScript / browser worker—not a WebAssembly claim
Parsed fields appear here.

Use this check carefully

Copy complete raw headers from your own mailbox, preserving an original copy. Compare sender and reply destinations with the authentication results recorded by the receiver.

Interpret the evidence

Forwarding can change authentication behavior. Pasted pass labels cannot be independently verified here, and a compromised legitimate mailbox can send authenticated fraud. Confirm changes to bank details separately.

Read the related worked guide · Our methodology · Report a problem