Question 1

How do I get the raw headers of an email?

Accepted Answer

In Gmail, open the message, click the three dots, then 'Show original'. The header block at the top is what you paste here. In Outlook, open the message, File > Properties > Internet headers. Most other clients have a 'Show headers' or 'View source' option.

Question 2

Is my email data uploaded anywhere?

Accepted Answer

No. The analysis runs entirely in your browser. Nothing you paste is sent to any server.

Question 3

What does it mean if SPF passes but DMARC fails?

Accepted Answer

It usually means the message was sent from an IP your SPF allows, but the sending domain does not match the domain in the From header, so DMARC alignment fails. The sender may be legitimate (a third-party tool sending on your behalf without DKIM), or it may be spoofing you.