📧 Email Header Analyzer

SPF (Sender Policy Framework) validates that the sending server is authorized to send emails on behalf of a domain. A PASS means the email came from a permitted source, reducing spoofing risk.

DKIM (DomainKeys Identified Mail) adds a digital signature to the email header. The receiving server verifies it using the sender's public DNS record. A PASS indicates the message was not altered in transit.

DMARC (Domain-based Message Authentication, Reporting & Conformance) builds on SPF and DKIM. It tells receivers how to handle emails that fail checks (e.g., reject, quarantine) and enables domain owners to get reports.

Gmail: Open the message, click three dots → “Show original”.
Outlook: Open message, File → Properties → “Internet headers”.
Apple Mail: Open message, View → Message → “Raw Source”.
Yahoo: Open message, More → “View raw message”.

“None” means the receiving server did not include authentication results in the headers. This can happen if the sender's domain has no SPF/DKIM/DMARC records, or the email was forwarded and headers were stripped.

Absolutely. All analysis is performed entirely in your browser using JavaScript. No data is ever sent to any server.