Skip to content

محلل ترويسة البريد الإلكتروني المجاني

تحليل رؤوس البريد الإلكتروني لاكتشاف التصيد

تكشف رؤوس البريد الإلكتروني عن المصدر الحقيقي لكل رسالة. الصق رؤوس بريدك الإلكتروني أدناه للتحقق من مصادقة SPF وDKIM وDMARC، وتتبع مسار الرسالة، وتحديد العلامات الحمراء التي قد تشير إلى محاولات التصيد أو الانتحال. يتم كل التحليل في متصفحك.

How to get the raw email headers

The tool needs the full raw headers, not the visible message. In Gmail, open the email, click the three-dot menu and choose “Show original”. In Outlook, open the message, go to File then Properties, and copy the “Internet headers” box. In Apple Mail, use View then Message then Raw Source. Paste the whole block above.

What the results tell you

Headers record the path a message actually took and the results of the checks that prove who sent it. Focus on three: إس بي إف (was the sending server authorised for that domain), دي كيه آي إم (was the message cryptographically signed and unaltered), and دي إم إيه آر سي (did the visible “From” line align with those checks). A “fail” or “none” on these, especially when the email asks for money, credentials, or urgency, is a strong spoofing signal. Our guide to email header red flags walks through real examples.

Browse the rest of our free security tools for password and file-integrity checks.

الأسئلة الشائعة

What are SPF, DKIM and DMARC?

They are email authentication checks. SPF verifies the sending server is authorised for the domain, DKIM verifies the message was signed and not altered, and DMARC ties both to the visible “From” address. Failures on these are common signs of spoofing.

Can headers prove an email is a scam?

They are strong evidence, not absolute proof. Failed authentication plus a suspicious request is a clear red flag, but a message can pass these checks and still be malicious if the sender’s own account was compromised. Combine the headers with judgement about what the email is asking for.

Login

Existing contributors can sign in to manage their account.

Contact

Send a question, correction or contribution enquiry to Security Briefing.

Optional media preferences

YouTube videos stay blocked until you accept. Loading a player sends your IP address and browser information to YouTube. Your choice is stored in this browser. Rejecting or withdrawing removes players from this site.

Cookie and storage details

arArabic