Is your domain spoofable?

Paste your email. In seconds, see whether your domain's SPF, DKIM, and DMARC records protect you against spoofing — and if they don't, get a real demo email proving it.

Try a sample:

abdi@qani.dk — weak SPF, no DMARC

What we check

SPF — which servers are allowed to send mail as your domain
DKIM — cryptographic signatures proving messages weren't tampered with
DMARC — what receivers should do when SPF/DKIM checks fail

If your domain is spoofable

The tool sends a real demo email with your address in the From: header straight to your mailbox — proving that anyone could do the same. You'll see exactly what an attacker would write.