candygoogy

Mail check

Type a domain to see how well its email is protected against fakes, in plain words.

The domain name is sent to Cloudflare’s public DNS (1.1.1.1) to look up its records. Nothing else leaves your browser.

Example: shop.example, a made-up domain

Mail from this domain is well protected.

  1. Receiving (MX)

    In place

    It receives mail through two servers.

    • mx1.mailhost.example (10)
    • mx2.mailhost.example (20)

  2. Who may send (SPF)

    In place

    It lists who may send, and asks receivers to mark anyone else as suspicious (~all).

    • 1 of 10 DNS lookups.
    • v=spf1 include:_spf.mailhost.example ~all

  3. Signatures (DKIM)

    In place

    Found a key under s1.

    • s1: RSA, 2048 bits

  4. Policy (DMARC)

    In place

    Fakes go to spam (p=quarantine).

    • Reports on all mail that claims to be from this domain go to the address it lists, usually once a day.

  5. Extras

    Its DNS answers are signed (DNSSEC).

    • No MTA-STS, so other servers may deliver to it unencrypted.
    • No TLS reporting.