Home▸Cybersecurity▸SPF/DKIM/DMARC Email Spoofing Simulator

SPF/DKIM/DMARC Email Spoofing Simulator

Send a spoofed email claiming to be from a trusted domain and watch it sail straight into the inbox with no authentication, versus a receiving mail server checking SPF IP authorization, DKIM signature validity and DMARC policy — quarantining or rejecting it before delivery.

Cybersecurity3DModerate60 FPS

Choose which server actually sends the message, choose whether the receiving mail server enforces SPF, DKIM and DMARC, then send an email claiming to be from a trusted domain and watch the pipeline decide whether it lands in the inbox or gets stopped.

⚙ Under the hood

Send a spoofed email claiming to be from a trusted domain from an attacker-controlled server and watch a Three.js mail pipeline check it: with no authentication it sails straight into the inbox, but with SPF+DKIM+DMARC enforced, the receiving server checks the sending IP against the domain's SPF record, verifies the DKIM signature, and DMARC's policy quarantines the mismatch before delivery — live pass/fail readout for each of the three checks.

CybersecurityEmail SecuritySPFDKIMDMARCPhishingThree.js

3D · Three.js / WebGL renderer · 60 FPS target · runs fully client-side, no install