Can anyone send email as your domain?
Check your SPF, DMARC, DKIM and MX in seconds — and see if scammers could spoof your address.
Why it matters
If your domain isn't locked down, anyone can pretend to be you
SPF, DKIM and DMARC are the records that prove an email really came from your domain. Without them, scammers can send invoices and phishing emails as you — and even your genuine email is more likely to land in spam.
- Stops impersonation. A strict DMARC policy blocks anyone spoofing your address to scam your customers.
- Reaches the inbox. Authenticated mail is trusted by Gmail and Outlook — so it stops landing in spam.
- Protects your brand. One fraudulent email sent "from" you can undo years of hard-won trust.
Checking your whole setup? Try the free SEO check or the broken link checker.
yourcompany.com
Well protected — not spoofable
How it works
Enter your domain
Just the domain you send email from — no login, no access needed.
We read your DNS
We look up your live SPF, DKIM, DMARC and MX records in seconds.
Get your grade + fixes
A clear A–F grade, whether you're spoofable, and exactly what to change.
Want your email locked down?
We'll set up SPF, DKIM and a strict DMARC policy so no one can spoof your domain — and your legitimate email lands in the inbox.