Free email security check
Can someone send email pretending to be you?
Fake invoices and “we’ve changed our bank details” emails work because many domains let anyone send mail in their name. Check yours in about 20 seconds and get the exact DNS records to fix it.
Checks your suppliers too. Scammers often pose as a supplier: “we’ve changed our bank details, pay this account instead.” Add up to three companies you pay and we’ll tell you if their email can be faked.
- No account needed
- Public records only
- Nothing stored
What we check
What the check looks at
Six areas, all from public records. Each answer shows the record it came from.
Fake email in your name
SPF and DMARC: whether mail servers are told to refuse, junk or deliver email that pretends to come from you.
Signed email
DKIM keys under the names common mail services use, and whether they are long enough.
Encrypted delivery
MTA-STS and TLS reporting, which make other servers insist on encryption when they send to you.
Domain and DNS
Registration expiry, the registrar lock, DNSSEC and CAA, from the registry's public record.
Lookalike domains
About 400 typo and look-alike names of your domain, and which of them are set up to send or receive email.
Your suppliers
The same spoofing basics for up to three suppliers, because fake invoices usually pretend to come from one.
How it’s checked
Only public records: DNS answers read through Google and Cloudflare DNS-over-HTTPS, the registry’s public RDAP record, and your published MTA-STS policy file if there is one. We never connect to your mail servers or send any email. The grade follows fixed rules, and lookalike domains don’t change it, because they are other people’s registrations.
Results are held in memory for ten minutes and then discarded. Nothing is stored or linked to you.
Privacy policyFor IT providers and security teams
Inside Scan Hub the same check runs for each client and produces a white-label PDF with your logo, the evidence behind every answer and a fingerprint anyone can verify. Check the domain again after the fixes and the report shows the grade before and after, so the client sees the work was done.