MSRXMSRXSecurity
Tools / Phishing & email

Email spoofing check (SPF, DMARC, CAA)

Can anyone send mail as your domain? Reads SPF, DMARC and CAA records and explains each in plain words.

Runs on our server

Loading tool…

Good to know

  • SPF lists who may send mail as you; DMARC tells receivers what to do when mail fails; CAA limits who can issue your TLS certificates.
  • A domain that sends no mail at all should still publish v=spf1 -all and a DMARC p=reject record.
  • DKIM needs a selector name, so it is not checked here.