Free email domain check

Can someone send email pretending to be you?

Enter your company domain. We check its public email records and explain what to ask your IT company to review. No sign-in or access to your inbox is needed.

Check your company domain

Use the part after @ in your work email, such as example.com. Do not enter your email address.

We do not save the domain in our application unless you ask us to email the report.

What this check can tell you

We check who your domain allows to send email (SPF), what receiving inboxes are asked to do with messages that fail your domain's checks (DMARC), and signing keys at seven common locations (DKIM). We also look at where incoming mail is routed (MX).

Public records cannot tell us whether an inbox is safe or whether an email has been sent using your name. A signing key does not prove your outgoing messages use it. We do not send a test email or change any settings.

We do not save domains you check in our application unless you submit the email report form. Our DNS provider receives the domain to answer the lookup. A shared result link contains the domain and runs a fresh check when opened.