Is your domain protected against email spoofing?

Send one real test email and get back a plain-English report on your SPF, DKIM and DMARC setup - checked against what a receiving mail server actually sees, not just a DNS lookup.

Your email address Type the digits shown below CAPTCHA - enter the digits shown in the image

Currently supported checks

SPF, DKIM and DMARC always run, from your test email. The rest are looked up directly from your domain's public DNS - included by default, untick anything you already know you don't have.

SPF - which mail servers are allowed to send for your domain. Always included. DKIM - a cryptographic signature proving a message wasn't altered in transit. Always included. DMARC - the policy tying SPF and DKIM together. Always included. MX - do you have mail servers published at all? TLS-RPT - do you get reports about failed TLS connections? MTA-STS - is incoming mail protected against downgrade attacks? BIMI - does your logo show up next to your emails?

SPF

Which mail servers are allowed to send for your domain.

DKIM

A cryptographic signature proving a message wasn't altered in transit.

DMARC

The policy tying SPF and DKIM together, and what happens on failure.

Do you have mail servers published at all?

TLS-RPT

Do you get reports about failed TLS connections?

MTA-STS

Is incoming mail protected against downgrade attacks?

BIMI

Does your logo show up next to your emails?