🔍 Free Security Tool
Paste the raw email header — SPF/DKIM/DMARC, Microsoft 365 antispam, phishing indicators and A-F security grade are automatically calculated.
Defines which servers can send email for a domain. Without SPF, anyone can send email on your behalf.
A cryptographic signature mechanism that verifies email content was not altered in transit.
A policy record that determines what happens to an email when SPF and DKIM fail (reject/quarantine/none).
-1: Safe listed. 0-4: Clean. 5-6: Likely spam. 7-9: Definite spam/quarantine. Microsoft Exchange's internal scoring system.
Reply-To ≠ From, Return-Path ≠ From domain mismatches and SPF/DKIM/DMARC failures are the main phishing indicators.
The server route of an email from source to destination. Each Received header represents a hop; many unknown hops may indicate spoofing.