Free Domain Scanner

Is your domain email-safe?

Scan any domain to check SPF, DKIM, and DMARC configuration. Find email security gaps before attackers exploit them.

🔐
SPF Check
Verify which servers are authorized to send email for a domain
✍️
DKIM Check
Confirm emails are cryptographically signed and unmodified
🛡️
DMARC Check
Check if spoofed emails are rejected, quarantined, or allowed
📊
Security Grade
Get an overall A-F grade with actionable recommendations

Why scan your domain?

Email authentication records (SPF, DKIM, DMARC) are your domain's first line of defense against impersonation. Without them, attackers can send emails that appear to come from your domain — tricking your customers, partners, and employees.

91% of cyberattacks start with a phishing email. If your domain lacks proper authentication, you're not just vulnerable — you're a weapon. Attackers use unprotected domains to impersonate legitimate businesses and launch targeted phishing campaigns.

Who should scan their domain?

  • IT admins — verify your authentication is configured correctly
  • Security teams — audit vendor and partner domains before trusting their emails
  • Business owners — make sure no one is impersonating your brand
  • Sales teams — check prospect domains to understand their security posture