Can someone spoof your domain?

Enter your domain to check its email authentication — SPF, DKIM, and DMARC — the records that stop criminals from sending phishing and invoice-fraud emails that look like they came from you. It reads public DNS only; it never logs into anything.

Public DNS lookup only (SPF / DKIM / DMARC and related records). We never log into or probe your systems.