paste headers or drop eml · parse Authentication-Results · Received-SPF · local spoofing heuristics · no network DNS · runs locally
header-only validation — no live SPF/DKIM DNS checks
paste headers or drop .eml — local heuristics only, no DNS lookups