Free email security tools

Check how well a domain is protected against spoofing. No sign-up, no card. We read public DNS records and show you what they mean.

All tools

• Domain scanner

  Check a domain's DMARC, SPF, DKIM, BIMI, MTA-STS, TLS-RPT, DNSSEC and blocklist status in one scan, with a score and a fix list.

• DMARC checker

  Look up and validate a domain's DMARC record, see what each tag means, and build a correct record with the generator.

• SPF checker

  Validate an SPF record, count its DNS lookups against the limit of 10, see the include tree, and generate a correct record.

• DKIM checker

  Check a DKIM record by selector, or probe the common selectors. Shows key length, testing flags and revoked keys.

• BIMI checker

  Check a BIMI record, the DMARC policy it depends on, and whether the logo file meets the SVG Tiny PS requirements.

• MTA-STS and TLS-RPT checker

  Check a domain's MTA-STS record and policy file against its MX hosts, and its TLS-RPT reporting address.

• Blocklist checker

  Check whether a domain's mail servers and the domain itself are listed on common spam blocklists.

• Lookalike domain checker

  Find look-alike versions of your domain (typos, swapped letters, look-alike characters, other endings) that are registered, and see which can send mail.

• Phishing link checker

  Paste a suspicious link to see the tricks it uses and where it really leads, without opening it.

• DMARC report analyzer

  Upload a DMARC aggregate report (XML, gzip or zip) and see who sent mail as your domain, and what passed and failed.

• Email header analyzer

  Paste the headers of an email to see the route it took, delays at each hop, and its SPF, DKIM and DMARC results.