Free · no sign-in · public DNS only
Can anyone send mail
as your domain?
We read the records every mail server reads before it trusts a message from you: who may send, what happens to a fake, whether the line is encrypted. Seconds, nothing to install.
The same public records Sendmarc, MXToolbox and Microsoft read.
What the scan reads5 counted
- DMARCWhat to do with a fake
Tells receivers to reject or junk mail that fails SPF and DKIM, and to send you reports.
- SPFWho may send
Lists the servers allowed to send as you. Past 10 DNS lookups it stops working.
- DKIMSigned by you
Public keys that prove a message was signed by your mail service. Checked on common selectors.
- MTA-STSEncryption required
Makes senders refuse to deliver to you without TLS.
- TLS-RPTTell me when it fails
Senders tell you when an encrypted delivery failed.
- MXWho receives
Who receives your mail: context, not counted.
- BIMIYour logo in the inbox
Your logo in the inbox. Optional, never counted.