{"uid":"cap_r3Og1rG9OWwnUhnNoO4xu","slug":"email-header-analyzer-phishing-detector-efd29cfc","name":"Email Header Analyzer & Phishing Detector","description":"Analyze raw email headers: sender, recipient, subject, server hops (Received) with delays, SPF/DKIM/DMARC results, Return-Path and Reply-To mismatches and spoofing signals, with a verdict. Investigate phishing or delivery issues. Nothing is stored.","url":"https://api.vextorium.com/cabeceras-email-pago?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"cabeceras":{"type":"string"}}},"responseSchema":{"type":"json","example":{"de":"Bank <security@bank-example.com>","para":null,"fecha":null,"asunto":"Verify your account","avisos":["DKIM: fail","DMARC: fail"],"saltos":[],"reply_to":"support@other-domain.ru","veredicto":"sospechoso","message_id":null,"return_path":null,"autenticacion":{"spf":"pass","dkim":"fail","dmarc":"fail"},"retraso_total_s":0}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.003","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.003/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_fHa6mbiy1MGhJe0_d90hP","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.003","costPer":"request","priority":0,"asset":"EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Parses raw email headers to extract sender/recipient/subject, trace server hops with delays, evaluate SPF/DKIM/DMARC authentication, detect spoofing signals, and return a phishing verdict.","exampleAgentPrompt":"I got a suspicious email claiming to be from my bank — can you analyze these raw email headers and tell me if it's a phishing attempt, including the SPF/DKIM/DMARC results and any spoofing signals? Here are the headers: [paste headers]","exampleUseCases":[{"title":"Phishing investigation for security team","prompt":"Our employee received a spoofed email pretending to be from HR — can you analyze these email headers and give me a verdict on whether it's phishing, including any Reply-To or Return-Path mismatches and the DKIM/DMARC results?"},{"title":"Email deliverability troubleshooting","prompt":"My transactional emails are ending up in spam — can you analyze these raw headers and tell me if SPF, DKIM, and DMARC are passing, and show me the server hops with delays so I can figure out where the problem is?"},{"title":"Spoofed sender domain detection","prompt":"I received an email that looks like it's from our CEO but something feels off — please parse these email headers and check if the sender domain is being spoofed, and flag any mismatch between the From, Reply-To, and Return-Path fields."}],"resultDescription":"A JSON object with parsed email metadata (sender, recipient, subject, date, Message-ID), an array of server hops with timing, SPF/DKIM/DMARC authentication results, detected spoofing warnings (avisos), total delivery delay in seconds, and a verdict string (e.g. 'sospechoso' for suspicious). Nothing is stored server-side.","failureModes":["Missing or malformed 'cabeceras' field returns a parsing error","Headers with non-standard formatting may yield incomplete hop data","Empty or truncated header strings may produce null fields in output","Non-email-header text input may return null values across all fields","Very short headers lacking authentication records return null SPF/DKIM/DMARC"],"whenToPreferThis":"Choose this endpoint when you need a full forensic breakdown of raw email headers — including authentication chain (SPF/DKIM/DMARC), server hop timing, and spoofing signal detection — in a single stateless call. Prefer it over generic text analysis tools when investigating phishing, email impersonation, or deliverability issues where header-specific parsing and a phishing verdict are required.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-16T18:47:14.427Z","isFirstParty":false,"canonicalSlug":"email-header-analyzer-phishing-detector-efd29cfc"}