Kolaboro / Tools / Payment email check
Got an email asking you to pay? Check who really sent it.
Paste the email from the developer or agent. You see where replies go, whether the sender domain looks like the developer's real website, what your email provider's authentication said, and the wording payment-diversion emails use.
How it works
The headers are read in your browser: From, Reply-To, Return-Path, Sender, Authentication-Results (added by your email provider when the message arrived) and the Received lines.
The sender's domain and every link and address in the email are compared with the developer websites in our records: same name with another ending, lookalike letters, one or two letters changed, extra words.
For the sender's domain only, our server reads public DNS (SPF, DMARC, MX) over DNS-over-HTTPS and the registration date from RDAP. Nothing else from the email leaves your device.
No check can prove an email is genuine. A real mailbox can be hacked and send the right domain with the wrong account. That is why the call comes first.
Sources: developer websites from Kolaboro's named project data (list as JSON); DNS from Cloudflare 1.1.1.1 DNS over HTTPS; registration dates from RDAP. Also available in the Kolaboro X-ray browser extension for Gmail.