Free tool · Email & account security
Can someone send email as you?
Type your domain. We read its public records and tell you in ten seconds.
- SPFFound
- DKIMNot set up
- DMARCAnyone can spoof you
Example result. We only read public DNS records and never send email from your domain.
01 · How the scam works
It looks exactly like your invoice.
A scammer emails your client from your real address with “new bank details.” Without DMARC, their inbox can’t tell it’s fake.
- The payment goes to the scammer
- Your client usually blames you
- Most banks won’t reverse a wire
02 · What we set up
Three records that make fakes bounce.
SPF lists who may send for you, DKIM signs your real mail, DMARC tells inboxes to reject the rest. We move to enforcement slowly so your newsletters and invoicing tools keep working.
- Works with Microsoft 365 and Google Workspace
- Covers tools that send as you, like Mailchimp
# who may send mail for you
@ TXT "v=spf1 include:_spf.google.com -all"
# signature on every real message
google._domainkey TXT "v=DKIM1; k=rsa; p=MIIBIj…"
# what to do with fakes
_dmarc TXT "v=DMARC1; p=reject;
rua=mailto:reports@yourbusiness.com"03 · After setup
We keep watching the inbox.
Most email takeovers start with a quiet forwarding rule. We get an alert within minutes, check with you, and shut it down.
One plan
Locked in an afternoon. Watched every day after.
No contracts. If your domain already checks out, we’ll tell you and you won’t need us.
$49/ month per business
- SPF, DKIM and DMARC set up and enforced
- Two-step login on every mailbox
- Forwarding-rule and sign-in alerts
- Quarterly access review