Tools / Phishing & email
Email spoofing check (SPF, DMARC, CAA)
Can anyone send mail as your domain? Reads SPF, DMARC and CAA records and explains each in plain words.
Runs on our server
Loading tool…
Good to know
- SPF lists who may send mail as you; DMARC tells receivers what to do when mail fails; CAA limits who can issue your TLS certificates.
- A domain that sends no mail at all should still publish v=spf1 -all and a DMARC p=reject record.
- DKIM needs a selector name, so it is not checked here.
Related tools
Suspicious link inspector
Take a link apart before you click: look-alike letters, punycode, IP hosts, hidden user@ tricks, shorteners and risky TLDs.Website vulnerability scanner
Paste a URL. Get a SWOT security report scored out of 10: HTTPS, TLS, headers, cookies, content, DNS and email, with fixes.
Take a link apart before you click: look-alike letters, punycode, IP hosts, hidden user@ tricks, shorteners and risky TLDs.Website vulnerability scanner
Paste a URL. Get a SWOT security report scored out of 10: HTTPS, TLS, headers, cookies, content, DNS and email, with fixes.