Free tool · no sign-up
Can your domain be spoofed?
Check in seconds how your company's email is set up. Without protection, anyone can send email in your name, and your own emails are more likely to end up in spam.
Of 222 Chilean tech companies we checked, 64% can be spoofed. See the study
What it checks
- DMARC
- Whether a fake email in your name is rejected, sent to spam, or delivered anyway.
- SPF
- Which servers may send with your domain, and whether the record is valid (10 DNS lookups max).
- DKIM
- Whether your emails are signed, so nobody can alter them in transit.
- MX
- Where your domain receives email, and with which provider.
Everything comes from public DNS records, the same ones anyone can query. If something can't be confirmed from the outside, the report says so instead of guessing.