Free tool · no sign-up
Check your domain's SPF, DKIM and DMARC
Spoofed email is how many fake-invoice and payment-change scams start. Enter your domain to see whether it is protected, in plain language, in a few seconds.
Want this fixed, safely?
Moving DMARC to an enforcing policy without breaking legitimate mail needs care. Send us your result and a Missan engineer will reply with the next steps for your domain.
What the check looks at
Three records, one goal: nobody sends as you
SPF
One record, ending in -all or ~all, that stays under the 10-lookup limit.
DKIM
A published signing key, so receivers can verify mail was not altered or forged.
DMARC
A policy of quarantine or reject, with reporting, so spoofed mail is actually stopped.
Related: Managed cybersecurity · Cybersecurity scorecard · Free IT health check
FAQ
Email authentication, answered
What do SPF, DKIM and DMARC do?
SPF lists the servers allowed to send email for your domain. DKIM adds a cryptographic signature to each message. DMARC tells receiving mail servers what to do when a message fails those checks, and where to send reports. Together they make it much harder for someone to send email that pretends to come from your domain.
Why does this matter for business email compromise?
Fake invoices and payment-change requests often arrive from look-alike or spoofed addresses. A DMARC policy of quarantine or reject stops receivers accepting mail that falsely uses your exact domain. It does not stop look-alike domains, so staff awareness and payment verification still matter.
Why could my DKIM not be found?
DKIM keys sit under a selector name chosen by your mail provider, and there is no public list of them. This tool tries common selectors (Microsoft 365, Google Workspace and others). If yours uses a different selector, enter it in the selector box.
Is anything stored?
No. The lookups go straight from your browser to public DNS resolvers. Nothing is sent to Missan unless you choose to submit the form below.
Find out where your IT stands.
The free IT health check (AED 1,800 value) is a one-session review of your support, security, Microsoft 365 and backups. You get a written list of what to fix first.