Free domain scanner
Can someone else send email as you?
Type in your domain and see what a receiving mail server sees: your SPF, DKIM, DMARC and MX records, scored, with the first thing to fix.
- No sign-up
- Reads public DNS records only
- Takes a few seconds
This is what you'll get back for your own domain
example-company.com
Some gaps to close
The basics are in place, but a few settings still leave room for spoofed mail.
Start with DMARC
DMARC is monitoring or has limited enforcement.
-
DMARC Tells receiving servers what to do with mail that fails
WarningDMARC is monitoring or has limited enforcement.
-
SPF Lists the servers allowed to send as your domain
PassSPF tree checked: 4 of 10 DNS lookup terms.
-
DKIM Adds a signature so tampering with your mail can be detected
PassA DKIM public key was found among the selectors checked.
-
MX Points to the servers that receive your mail
PassMail exchanger records were found.
What the scan is checking
Three records decide whether a fake gets through
Every message that claims to be from you is checked against them on its way to the inbox. Pick a situation and follow one.
-
A message arrives
Dana Reyes
dana@yourcompany.com
Updated bank details for invoice 1042
Really sent by a stranger
-
SPF
The list of servers allowed to send as you
No list to check against
-
DKIM
A signature only your real mail carries
No signature to look for
-
DMARC
Your instructions for mail that fails
No instructions
-
Your customer's inbox
The fake can land
Nothing told the receiving server it wasn't you.
This is the situation the scanner calls “At risk of spoofing”.
-
A message arrives
Dana Reyes
dana@yourcompany.com
Updated bank details for invoice 1042
Really sent by a stranger
-
SPF
The list of servers allowed to send as you
Not on your list
-
DKIM
A signature only your real mail carries
Signature missing
-
DMARC
Your instructions for mail that fails
Told to reject it
-
Your customer's inbox
Nothing arrives
The fake is turned away before anyone sees it.
This is the situation the scanner calls “Well protected”.
-
A message arrives
Dana Reyes
dana@yourcompany.com
Invoice 1042 attached
Sent by Dana, through your email provider
-
SPF
The list of servers allowed to send as you
On your list
-
DKIM
A signature only your real mail carries
Signature matches
-
DMARC
Your instructions for mail that fails
Passes, nothing to do
-
Your customer's inbox
Delivered as usual
Your real mail arrives, with proof it came from you.
The same records that stop fakes help your real mail get delivered.
After the scan
Spotting the gap is the quick part
Closing it takes more care. Switch on full enforcement too early and your own invoices and newsletters can start bouncing. The safe route is to find every tool that sends mail as you first, then tighten the policy one step at a time.
That's the part we handle.
The safe route to full protection
Typically 60 to 120 days, start to finish
-
Monitor
p=none
See every service that sends as you. Nothing is blocked.
-
Quarantine
p=quarantine
Suspicious mail goes to spam while your real mail keeps flowing.
-
Reject
p=reject
Fakes are turned away before they reach anyone.
The whole way through: your real email keeps landing where it should.
Want a second opinion on your results?
Tell us what you're seeing and we'll point you to what to fix first.