Mail headers · email

Where does an email come from?

Paste the technical top lines (headers) of an email. You see which route the message took and which SPF, DKIM and DMARC results appear in the headers.

Paste the raw headers. Gmail: ⋮ → "Show original". Outlook: "View message source".

parsing runs in your browser · mail domains are checked through bounded public DNS · blacklist check only on request

Result

Which header result can you trust?

Source
Pasted text cannot prove which server wrote an Authentication-Results or Received field. Compare the named server with your own mail setup.
Alignment
SPF checks the envelope domain, DKIM the signing domain. DMARC determines whether either aligns with the visible From address.
Not a phishing test
The analysis does not check content, links, attachments or the DKIM signature. The blacklist check is only an extra signal.