Skip to content
— ✱ FREE TOOL · CYBER · NO SIGNUP

Can attackers spoof you?

Find out in 8 seconds if attackers can send mail as your domain.

We probe SPF, DMARC, DKIM, MTA-STS, BIMI, plus 8 lookalike-domain variants. No authentication, no port scanning, runs in ~2 seconds.

How this works
  • What we check: SPF + DMARC + DKIM (across 12 common selectors) + MTA-STS + TLS-RPT + BIMI, plus 8 typo-squat domains that may impersonate yours.
  • What we don't do: no authentication, no port scanning, no rate-stress. Public DNS + one HEAD request per published well-known endpoint.
  • Probe ID: all requests carry the user-agent VexocoreEmailSpoofabilityCheck/1.0 with a link to our responsible-disclosure policy.
  • Privacy: scan results are saved so you can reopen them. Sign in and they appear in your dashboard. We never sell your data; see our Privacy Policy.
    Email Spoofability Checker · Free · VEXOCORE