DMARC Checker: Can someone spoof your domain?

Enter your domain to check its email authentication — SPF, DKIM, and DMARC — the records that stop criminals from sending phishing and invoice-fraud emails that look like they came from you. It reads public DNS only; it never logs into anything.

Public DNS lookup only (SPF / DKIM / DMARC and related records). We never log into or probe your systems. By running a check you confirm you're authorised to assess the domain you enter.