Is this e-mail really from who it says? (SPF, DKIM, DMARC, lookalike sender)
check_emailPaste the raw headers of a message (Show original / View source). Returns checks and a read (headline, recommendation engage | verify_first | do_not_engage, failed checks, lookup links: show the user the read first): DMARC/SPF/DKIM as the receiving server recorded them, DKIM alignment with From, Reply-To going to another domain, and a From domain or display name that imitates a known business. The headers are processed in memory and never stored. Deterministic, no AI. Counts as 1 check with a key; free tier without one.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| headers | Yes | The raw message headers, as one string (the body is not needed) |