Paste a raw email header. See who really sent it, what authentication says, and what looks off. Nothing leaves your browser.
All calculations happen in your browser. We don’t store inputs.
A pasted raw email header. In Gmail, "Show original"; in Outlook, "View source".
A client-side parser breaks out From, Reply-To, Return-Path, Subject, Message-ID, the Received chain, and Authentication-Results.
A clean view of the routing, with red flags for auth failures and mismatched fields.
You can also click "Load a phishy sample" to see what a suspicious header looks like.
The parser flags DKIM, SPF, DMARC failures, From and Return-Path domain mismatches, and Cyrillic-range characters used for lookalikes.
A defensible second opinion before you click a link or forward to your security team.
Nothing about the pasted header is sent off-page.
All parsing happens in JavaScript in your browser. No backend, no logging, no analytics on the input.
A header forensic kit you can use on a co-worker forward without leaking it to a third-party service.
This is a starter kit, not a full forensic suite. The parser only flags structural issues that show in the header itself: DKIM/SPF/DMARC failures, domain mismatches, basic homoglyph patterns. It cannot tell you whether a sending server is on a known-bad list, whether the From domain is freshly registered, or whether the body content is malicious. For a deeper look, pair this output with a domain-age check (whois) and a blocklist check (Spamhaus, SURBL). The tool also assumes you pasted the full raw header, not the rendered email; partial input gives partial answers.
See whether a domain has its authentication records configured correctly.
Generate the typo and homoglyph variants attackers use against a domain.
A walkthrough of what to look for in a real phishing header.
The signals that show in the body and the ones that show in the header.
What slips past Google’s ML and why a header view catches it.
Rythm is the inbox protection that powers this estimate. $1.65 per month. Cancel anytime.
Annual on Lightning includes one bonus month. See full pricing.
