Email Authentication Scanner
Checks the domain's SPF, DKIM, DMARC, MX, BIMI and MTA-STS records to prevent email spoofing.
What it checks
This scanner queries your domain's email authentication records: SPF, DMARC, BIMI and MTA-STS. It checks whether they are present and correctly configured to verify that only authorized servers can send email on your behalf.
Why it matters
Without proper SPF and DMARC, anyone can send emails that appear to come from your domain, a tactic widely used in phishing and fraud. That damages your customers' trust and makes your legitimate emails land in spam more often.
How to fix it
Publish an SPF record in your DNS listing your sending servers and a DMARC record with a policy that rejects or quarantines unauthorized mail. Start with a soft policy to observe traffic and tighten it as you confirm everything works.
Check it on your site
Scan your site free and see if this and 44 other checks pass, with a fix prompt for every issue.
Scan my site free