SpoofCheck

Is your domain spoofable ?

Check in one click if your domain is protected against email spoofing. SPF, DKIM, DMARC, and MTA-STS analysis.

4,830 domains analyzed

What users are saying

I used it, it worked well and I realized I had an issue with my SPF record. The tool didn't try to sell me anything and it seems like a useful tool for those looking to self-host their email.

spardha
spardhaReddit

Nice work. SMTP being unauthenticated by default is really one of the most underestimated security flaws. One thing to highlight: having SPF and DKIM records is not enough. DMARC is what ties them together and actually enforces the policy.

littleko
littlekoReddit

Awesome! I appreciate this. I'm pushing my company because they have an MSP managing everything. This will add to my growing concerns about vulnerabilities I'm going to present to the organization.

Efficient-Cup-8619
Efficient-Cup-8619Reddit

I'm glad my work domain gets 100%, we spend enough time on it!

Jezbod
JezbodReddit

I've used it on a few of my domains and one of them didn't have a DMARC record, it gave you a solution on how to create one. I like how on the MX area it also identified the mail provider. This is a very solid tool for anyone to properly secure their mail services.

MemoryMobile6638
MemoryMobile6638Reddit

Very nice tool, will be adding to my useful tools bookmark.

Anonymous
AnonymousReddit

Frequently asked questions