SPF
Lists the servers allowed to send email for your domain. Without it, anyone's server looks as valid as yours.
Home Free scan
Free tool · 10 secondsCheck any domain for email spoofing and basic DNS health. It runs in your browser, and nothing is stored.
A snapshot of public DNS records, not a full security audit. It can't see your website code or your mailbox settings. For speed and SEO, try Google PageSpeed Insights.
Lists the servers allowed to send email for your domain. Without it, anyone's server looks as valid as yours.
Signs each email, so receivers can tell it really came from you and wasn't changed.
Tells receivers what to do with email that fails those checks. This is what actually stops people pretending to be you.
Whether your domain can receive email, and which provider handles it.
Whether your domain and its www address resolve to a server.
Two optional extras that protect your DNS answers and limit who can issue your certificates.
Yes. It only reads public DNS records, the same ones every mail server reads. It doesn't touch your website or your mailbox.
No. The scan runs in your browser and we never see it. To look up the records, your browser asks Cloudflare's public DNS service, or Google's as a backup.
DKIM keys live under a name your email provider picks, and DNS can't list them. We try the common names, so a miss can be a false alarm. Your email provider's settings will confirm it.
It means someone may be able to send email that looks like it came from you, or that your own email is more likely to land in spam. Most fixes take minutes once you know what to change.
Yes. Send us the result and we'll tell you what to change. It's usually a few DNS records.
Send us the result. It's usually a few DNS records, and we'll tell you exactly which ones.