SpoofCheck

Is your domain spoofable ?

Run a free email spoofing test in one click and find out if your domain can be spoofed. SPF, DKIM, DMARC and MTA-STS analysis.

21,664 domains analyzed

What users are saying

“I used it, it worked well and I realized I had an issue with my SPF record. The tool didn't try to sell me anything and it seems like a useful tool for those looking to self-host their email.”

spardha
spardhaReddit

“Nice work. SMTP being unauthenticated by default is really one of the most underestimated security flaws. One thing to highlight: having SPF and DKIM records is not enough. DMARC is what ties them together and actually enforces the policy.”

littleko
littlekoReddit

“Awesome! I appreciate this. I'm pushing my company because they have an MSP managing everything. This will add to my growing concerns about vulnerabilities I'm going to present to the organization.”

Efficient-Cup-8619
Efficient-Cup-8619Reddit

“I'm glad my work domain gets 100%, we spend enough time on it!”

Jezbod
JezbodReddit

“I've used it on a few of my domains and one of them didn't have a DMARC record, it gave you a solution on how to create one. I like how on the MX area it also identified the mail provider. This is a very solid tool for anyone to properly secure their mail services.”

MemoryMobile6638
MemoryMobile6638Reddit

“Very nice tool, will be adding to my useful tools bookmark.”

Anonymous
AnonymousReddit

Frequently asked questions