NDJ – Mail Header Analyzer
What this tool does: it reads the raw headers you paste, maps the servers your email passed through, and checks public DNS signals (SPF, DKIM, DMARC, and a few blocklists).
What it doesn’t do: it can’t guarantee who pressed “send,” decrypt content, or replace a mail provider’s full security checks. Think of it as a smart magnifying glass—great for clues and patterns, not a final verdict.
What it doesn’t do: it can’t guarantee who pressed “send,” decrypt content, or replace a mail provider’s full security checks. Think of it as a smart magnifying glass—great for clues and patterns, not a final verdict.
Paste a full raw header (RFC 5322 / RFC 822). The tool will parse hops, SPF/DKIM/DMARC, and do free DNS checks.
⏳
Help
- SPF evaluation supports
ip4,a,mx, and single-levelinclude:. For exact verdicts we also readAuthentication-Resultswhen present. - DKIM verification here is key presence/shape. Full crypto verification requires mail server access and is beyond scope.
- DNSBL checks use free DNS queries (Spamhaus ZEN, SpamCop, HostKarma, PSBL). Results can vary by network/ISP resolver.