Can someone send email pretending to be you?
Enter your domain. We check the DNS records that stop impersonation, and tell you in plain language what is missing. Nothing is stored and no signup is needed.
Enter a domain to check.
How these protections work A plain-language guide to the four records we check
SPF
Your approved courier list. It shows which servers may send email for your domain.
More than one SPF record causes the check to fail.
DKIM
A tamper-proof seal on each message.
It helps confirm that the email came from your domain and was not altered.
DMARC
The delivery instructions. It tells receiving servers what to do with suspicious email.
It can allow, quarantine or reject messages that do not pass aligned SPF or DKIM, and can send reports.
MTA-STS
A secure delivery route for incoming email.
It requires encrypted TLS delivery and helps prevent connection downgrade attacks.
These protections reduce email impersonation and improve the chances of legitimate messages reaching the inbox.
This tool analyses publicly available DNS records and provides guidance based on industry best practices. A high score does not guarantee protection against all email threats. We do not store the domains you check, and we do not send you anything. DKIM is tested against 12 common selectors, so a custom selector may not be detected. Hosting and network names are inferred from public DNS records and may not be exact.