Can you be spoofed?
Scammers send billions of emails pretending to be businesses they're not. Type your domain and find out, in about ten seconds, whether yours is one they could impersonate.
Looking up DNS records…
Results for ·
This is a read-only check of public DNS records: the same records any mail server on the internet reads before accepting a message claiming to come from this domain. Nothing is sent to, or tested against, the domain itself. Results are a strong signal, not a formal audit: DKIM in particular can only be confirmed, never ruled out, from the outside.
What is email spoofing?
The email system was designed in the 1980s, when the internet was a friendly place. Out of the box, anyone can put any address in the "From" line, the way anyone can write any return address on an envelope. Scammers use this to send invoices, password resets and urgent requests that appear to come from real businesses.
Three free DNS records, SPF, DKIM and DMARC, let a domain owner tell the world's mail servers "here's how to recognise real mail from us; bin everything else." Most large companies publish them. Many small businesses don't, and those are exactly the ones scammers impersonate, because it works.
This checker reads those public records for any domain and translates them into plain English, with a grade and a fix list you can hand to whoever runs your email.