Auth at a glance
Clear pass/fail chips for SPF, DKIM and DMARC.
Free tool · Beta
Read email headers for spoofing in seconds.
Paste raw email headers and get a plain-language read on SPF, DKIM, DMARC and sender spoofing.
Free beta · No signup · Runs in your browser
What it is
Read email headers for spoofing in seconds.
AntiPhish is a free analyzer: paste an email’s raw headers and it summarizes the SPF, DKIM and DMARC results the receiver reported and flags sender and display-name spoofing. It runs entirely in your browser.
Features
What it does
Spoofing checks
Flags From/Return-Path mismatches, look-alike domains and display-name impersonation.
Plain-language findings
Each finding explains what it means and why it matters.
Private
Headers are parsed locally and never uploaded.
How it works
Three steps, no setup
- 1
Get the raw headers
Open the original message in your mail client and copy the headers.
- 2
Paste them in
The analyzer parses them locally.
- 3
Read the verdict
Review the auth results and flagged spoofing signs.
Try it now · Free beta
Try AntiPhish
Use it right here. Nothing you enter leaves your browser.
Analysis
Paste headers to analyze
Reads authentication results reported by the receiving mail server (SPF/DKIM/DMARC) and checks the From/Return-Path and display name for common spoofing signs. It does not re-verify signatures or query DNS. A pass is not proof an email is safe. Runs in your browser.
FAQ
Questions, answered
Is it free?
Yes. AntiPhish is free to use while it’s in beta, with no account required.
Is my data stored anywhere?
No. Everything runs in your browser. Nothing you enter is sent to a server, and it clears when you reload.
Does a pass mean the email is safe?
No. SPF/DKIM/DMARC passing only means the mail was authenticated; a legitimate-looking domain can still be malicious. Use the result as one signal.
Does it re-verify signatures?
No. It reads the results the receiving server already reported and does not query DNS or recompute DKIM.