EmailAuthCheck

What is EmailAuthCheck?

Email spoofing is trivial. Anyone can send an email that appears to come from your bank, your boss, or your supplier. Most email clients show the display name and nothing else. The actual sender domain, its authentication records, and whether the message passed verification are all hidden.

EmailAuthCheck works inside Gmail and Outlook Web to verify every email you open. It checks SPF, DKIM, and DMARC records and tells you whether the sender is legitimate, suspicious, or outright spoofed.

Features

• SPF verification - Checks whether the sending server is authorized to send on behalf of the claimed domain.
• DKIM signature check - Validates the cryptographic signature to confirm the message was not altered in transit.
• DMARC validation - Verifies that the domain’s DMARC policy is enforced and the message aligns with it.
• Sender domain reputation - Rates the sending domain based on age, category, and known abuse reports.
• Spoofing detection - Compares the visible “From” address against the actual Return-Path and envelope sender.
• Lookalike domain detection - Flags sender domains that resemble legitimate ones (examp1e.com vs example.com).

Who is it for?

Built for Gmail and Outlook Web users who want to verify emails before acting on them. Whether it is a wire transfer request, a password reset, or an invoice, EmailAuthCheck tells you if the sender is real.

• Anonymized crowdsourced intelligence (opt-in)
• You can opt out, but crowdsourced features will be disabled
• Read the privacy policy