headerz — email header autopsy — Received · SPF/DKIM/DMARC

#security[+tool]email header autopsy — Received · SPF/DKIM/DMARC · spoof flags

--:-- * you opened a query with@headerz

-!- paste raw headers, parse hops + auth + phishing tells, live

-!- paste raw headers (View Source / Show Original). Parsed locally — no mail server, no upload.

/msg @headerz — raw headers

── Received hops (newest first) ──

── Authentication ──

── Flags ──

-!- envelope (Return-Path) vs header (From) mismatch is the classic spoof tell. Reply-To hijack sends your reply to the attacker.