Free Domain Scanner
Is your domain email-safe?
Live DNS check of any domain’s SPF, DMARC, MX, and DKIM records — the records that decide whether attackers can send email as you. Real lookups, transparent grading, no sign-up.
DNS lookups only — we never connect to the domain itself.
🔐
SPF Check
Reads the real SPF record and flags +all, multiple records, and missing policies
🛡️
DMARC Check
Reads _dmarc and grades the policy: reject, quarantine, none, or missing
📮
MX Check
Confirms mail servers (or an explicit null MX) are published
✍️
DKIM Probe
Probes common selectors; honestly reports "not detectable" when none are found
Why scan your domain?
Email authentication records (SPF, DKIM, DMARC) are your domain's first line of defense against impersonation. Without them, attackers can send emails that appear to come from your domain — tricking your customers, partners, and employees.
This scanner performs live DNS lookups — the same records every mail receiver consults — and grades them with a fixed, published rubric. What it can't see (like DKIM keys under private selector names) it says it can't see, instead of guessing.
Who should scan their domain?
- IT admins — verify your authentication is configured correctly
- Security teams — audit vendor and partner domains before trusting their emails
- Business owners — make sure no one can trivially impersonate your brand
- Sales teams — check prospect domains to understand their security posture