Can someone send email pretending to be you?

Check any domain’s SPF, DKIM and DMARC configuration. Most domains are missing at least one — which is how phishing and invoice fraud get through.

Runs in your browser over DNS-over-HTTPS · nothing is sent to us or stored

What gets checked

Four records decide whether your domain can be spoofed.

Which servers may send as your domain

Cryptographic signing of outgoing mail

What receivers do when checks fail

Where your inbound mail is handled

More email tools

Configuring DNS, TLS and email authentication properly — without breaking live traffic — is part of our cybersecurity and managed services work.