Paste the email's headers below. In seconds you'll see who really sent it, whether it passed your email provider's anti-fake checks, and whether it's copying a bank or brand. Everything runs in your browser: the email is never uploaded or saved.
Gmail (computer): open the email, click the three dots beside Reply, choose Show original, then Copy to clipboard.
Outlook.com / Microsoft 365 (web): open the email, click the three dots, choose View, then View message source. Select all and copy.
Outlook (Windows app): open the email in its own window, choose File, then Properties, and copy everything in Internet headers.
Apple Mail (Mac): select the email, then choose View, Message, Raw Source. Select all and copy.
Yahoo Mail: open the email, click the three dots, choose View raw message.
On a phone? Most phone apps hide headers. Open the email on a computer, or forward it as an attachment to your IT contact.
This tool checks emails you receive. To stop criminals sending emails that look like they come from you, check your own domain's protection, and see who has registered copycat domains.
When an email arrives, your provider checks whether it really came from the sender's approved servers. We read the result it wrote into the headers and explain it.
Addresses like [email protected] that imitate more than 40 banks, couriers, tech companies and government services.
Invoice and gift-card scams often send your reply to a different, free email account.
Scammers use domains registered days ago. We look up when the sender's domain was created.
Paste the whole original message and we also check where its links go.
Belvic Group · Beltus Bejanga, SOC Analyst & Threat Hunter · [email protected] · 1-456 Carlton Street, St. Catharines, ON L2M 4X1 · Privacy · Terms
A verdict is guidance, not a guarantee. When an email asks for money or passwords, confirm by phone using a number you already know.