Free tool

Find out who can spoof your domain

SPF, DKIM, DMARC, MX, BIMI, and MTA-STS — read straight from your DNS and graded against what actually stops impersonation. A missing or permissive DMARC policy is all a phisher needs.

Passive DNS lookups only. No mail is sent, nothing is stored.

01SPF

02DKIM

03DMARC

04MX

05BIMI

06MTA-STS

10+Security Checks

6Categories

<15sScan Time

3/dayFree Scans

Daily Scan Limit Reached

You've used your 3 free scans today. Try the Lory AI Pentester for autonomous AI penetration testing of your in-scope assets.

Try the Lory AI Pentester Book a Demo

Initializing scan...

0/100

Calculating...

This scan only scratches the surface

Get Autonomous AI Penetration Testing

This scanner checks basic email authentication records. The Lory AI Pentester runs autonomous AI penetration testing of your in-scope assets, with AI-powered vulnerability analysis and automated alerting.

Try the Lory AI Pentester Book a Consultation

Usage-based pricing Human-reviewed findings No subscription

What We Check

Comprehensive Email Security Analysis

Our scanner checks for the most critical email authentication and security configurations.

SPF Records

Sender Policy Framework validation, mechanism analysis, lookup limits, and policy strictness checks.

DMARC Policy

Domain-based Message Authentication policy enforcement, reporting configuration, and alignment checks.

DKIM Signing

DomainKeys Identified Mail selector discovery across 12 common selectors for signature verification.

MX Records

Mail exchanger record validation, priority analysis, and redundancy checks for mail delivery.

MTA-STS

Mail Transfer Agent Strict Transport Security policy and TLS reporting configuration analysis.

BIMI

Brand Indicators for Message Identification record, logo URL, and Verified Mark Certificate checks.

How It Works

Scan in 3 Simple Steps

Get actionable email security insights in seconds.

Enter Your Domain

Type in any domain name - we'll query all the relevant DNS records automatically.

We Analyze

Our scanner checks 10+ email security configurations across 6 categories in under 15 seconds.

Get Your Report

Receive a detailed breakdown with a security score, findings, and actionable recommendations.

Frequently Asked Questions

Is this email scanner really free?

Yes, completely free with no sign-up required. You get 3 scans per day. For autonomous AI penetration testing of your in-scope assets and deeper analysis, check out the Lory AI Pentester.

What is SPF, DKIM, and DMARC?

SPF specifies which servers can send email for your domain. DKIM adds a digital signature to verify emails haven't been tampered with. DMARC tells receiving servers what to do when SPF or DKIM checks fail. Together, they protect against email spoofing and phishing.

What does my email security score mean?

Your score (0-100) reflects how well your domain's email authentication is configured. 80+ means strong protection, 50-79 means improvements needed, and below 50 indicates vulnerability to email spoofing.

Why is DMARC important?

Without DMARC, anyone can send emails that appear to come from your domain. DMARC with a "reject" policy tells email providers to block unauthorized emails, protecting your brand and preventing fraud.

Do you store my scan results?

No. Results are generated in real-time by querying public DNS records and delivered directly to your browser. We do not store or share any data.

What are MTA-STS and BIMI?

MTA-STS ensures emails sent to your domain are always encrypted in transit. BIMI allows your brand logo to appear next to your emails in supported clients like Gmail, increasing trust and visibility.

Stop Spoofing. Start Testing.

91% of cyberattacks begin with a phishing email. The Lory AI Pentester runs autonomous AI penetration testing of your in-scope assets with automated alerting.

Try the Lory AI Pentester Book Consultation

Usage-based — pay for what you run Prepaid credits, 1 credit = $1 No subscription