Freddie LeemanApr 20, 2025

Ever wonder what email servers are doing behind the scenes? At https://LearnDMARC.com, we turned the confusing world of email authentication into a visual story.

📡 Watch servers talk it out.
🎯 Take the DMARC quiz.
📬 Paste email headers.

Perfect for learners, IT pros, and anyone who’s ever yelled “WHY is SPF failing?!” Best of all? It’s free, and your data isn’t stored or used for anything beyond creating the visualization.

#EmailSecurity #DMARC #LearnDMARC #EmailAuthentication #SPF #DKIM #URIports

Learn and test SPF, DKIM and DMARC

Visualize, analyze and improve your email authentication setup

Show threadcybertrapped

@freddieleeman

I visited the website and entered headers of email I think is spoof. I wonder why your dmarc analyzer and proton PASSED SPF authentication when claimed email is like [email protected], but was sent through an oraclecloud.com server. example.com SPF record does not mention oraclecloud.com et all

Please view images to get a sense of what I'm trying to communicate/ask

I skimmed through RFC https://www.rfc-editor.org/rfc/rfc7208#section-1.1.1 according to standard SPF is a FAIL

What am I missing?

Jul 9, 2025 at 4:56amWeb
Show threadFreddie LeemanJul 9, 2025

@cybertrapped If you paste headers into LearnDMARC, we will visualize them for you, but do not check if they are valid. Please note that these headers may not be compliant with DMARC or SPF specifications. For example, when manually checking SPF for IP 192.184.11.189 on the domain abm.com, the result should be a permerror due to excessive void DNS lookups.

Received-SPF: permerror (abm.com ... _spf.salesforce.com: Maximum void DNS look-ups limit (2) exceeded) envelope-from="[email protected]"; client-ip=192.184.11.189

Show threadcybertrappedJul 9, 2025

@freddieleeman I expected the LearnDMARC to check validity (i.e., follow through validation process) so I can better grasp the process. For a layperson like me, checking the authenticity of an email, appears complex and ambiguous.

Oh well; there is an opportunity for improvement

Thank you Freddie

Show threadFreddie LeemanJul 10, 2025
@cybertrapped Please note that DKIM validation requires the complete email, and even missing whitespace can cause the hash calculation of the body to fail. If you'd like full validation, simply send the email to learnDMARC.com and we'll handle it for you. If you're only interested in understanding the headers, use the "paste headers" feature instead.
Show threadcybertrappedJul 10, 2025
@freddieleeman Thank you Freddie