Email Scam Analyzer

Drop in the sender's address — or paste the raw headers for the full story — and the analyzer does what a careful security person does by hand: checks how old the sending domain is, whether it publishes real SPF / DKIM / DMARC, whether the visible From matches the actual envelope sender, where the mail server lives, and whether any of it shows up on a blocklist. A brand-new domain with no DMARC and a mismatched Return-Path is a scam until proven otherwise.