Home Free scan

Free tool · 10 seconds

Can someone send email pretending to be you?

Check any domain for email spoofing and basic DNS health. It runs in your browser, and nothing is stored.

What we check

The records that decide who can use your name

SPF

Lists the servers allowed to send email for your domain. Without it, anyone's server looks as valid as yours.

DKIM

Signs each email, so receivers can tell it really came from you and wasn't changed.

DMARC

Tells receivers what to do with email that fails those checks. This is what actually stops people pretending to be you.

Mail server

Whether your domain can receive email, and which provider handles it.

Domain and website

Whether your domain and its www address resolve to a server.

DNSSEC and CAA

Two optional extras that protect your DNS answers and limit who can issue your certificates.

FAQ

Questions about the scan

Is this safe to run on any domain?

Yes. It only reads public DNS records, the same ones every mail server reads. It doesn't touch your website or your mailbox.

Do you keep what I type?

No. The scan runs in your browser and we never see it. To look up the records, your browser asks Cloudflare's public DNS service, or Google's as a backup.

Why does it say DKIM wasn't found when I have it?

DKIM keys live under a name your email provider picks, and DNS can't list them. We try the common names, so a miss can be a false alarm. Your email provider's settings will confirm it.

What does a low score mean?

It means someone may be able to send email that looks like it came from you, or that your own email is more likely to land in spam. Most fixes take minutes once you know what to change.

Can you fix it for us?

Yes. Send us the result and we'll tell you what to change. It's usually a few DNS records.

Fix it

Want us to fix what the scan found?

Send us the result. It's usually a few DNS records, and we'll tell you exactly which ones.

hello@operandalabs.com
Lahore · Dubai · Finland · working worldwide