Free tool · live

Can attackers send email as you?

Weak email authentication is how phishing wears your brand — and why your real mail lands in spam. Enter your domain for an instant grade on SPF, DKIM, DMARC, BIMI and MTA-STS, a plain answer to “can I be spoofed?”, and the exact records to fix it.

Pure DNS lookups — SPF, DKIM, DMARC, BIMI, MTA-STS. Nothing is sent or stored.

✉️

Enter your domain to see whether attackers can spoof your email — and why messages may hit spam.

All checks are public DNS lookups — the same records any receiving mail server reads. Nothing is sent, nothing is stored.