Can others send email in your name?
Check any domain for SPF, DKIM, DMARC, MTA-STS and BIMI. You get a grade and, for every problem, exactly what to change.
SPF
Which servers may send mail for the domain, whether the record is valid and stays under the 10-lookup limit.
DMARC
What receivers do with fake mail in your name (nothing, spam folder or reject) and whether you get reports.
DKIM
Whether outgoing mail is signed, by looking for keys under the names the big mail services use.
MTA-STS and TLS-RPT
Whether mail to you must arrive encrypted, and whether you hear about failures.
BIMI
Whether your logo can be shown next to your emails.
Mail servers
Which mail servers receive mail for the domain.
Questions
- Why does this matter?
- Without SPF and DMARC, criminals can send invoices and payment requests that look exactly like they come from you. It is one of the most common causes of invoice fraud.
- Is DKIM really missing if you can’t find it?
- Not necessarily. DKIM keys can have any name. We check the names used by Microsoft 365, Google Workspace and other big mail services. Your mail service shows the real status.
- Is it safe to check someone else’s domain?
- Yes. We only read public DNS records, the same ones every mail server reads when it receives mail.
OZAG Technologies · KVK 42167370 · Laan van Oversteen 20, 2289 CX Rijswijk · +31 6 24496620 · support@ozagsecurity.com