Email posture
Use this tool when you need a practical domain email-security review before spoofing, phishing or business-email compromise becomes a recurring problem.
The checker analyzes core email-authentication posture across SPF, DKIM, DMARC and MX records, then gives a prioritized hardening plan for stronger anti-spoofing resilience.
This page inspects DNS-backed controls that decide whether receiving mail systems can trust messages claiming to come from your domain.
DMARC enforcement is much stronger when legitimate mail streams have aligned DKIM signing and stable SPF sender inventory. Weak alignment can leave room for brand impersonation campaigns.
Run this after domain onboarding, mail-provider migration, vendor mail integrations, phishing waves targeting your brand or recurring sender-reputation issues.
This page is structured to answer this urgent user question with practical steps, tool output and related recovery workflows already visible in server-rendered HTML.
This page is structured to answer this urgent user question with practical steps, tool output and related recovery workflows already visible in server-rendered HTML.
This page is structured to answer this urgent user question with practical steps, tool output and related recovery workflows already visible in server-rendered HTML.
This page is structured to answer this urgent user question with practical steps, tool output and related recovery workflows already visible in server-rendered HTML.
This page is structured to answer this urgent user question with practical steps, tool output and related recovery workflows already visible in server-rendered HTML.
Official guidance or recovery documentation that supports the containment and next-step workflow on this page.
Open referenceOfficial guidance or recovery documentation that supports the containment and next-step workflow on this page.
Open referenceOfficial guidance or recovery documentation that supports the containment and next-step workflow on this page.
Open referenceNot reliably. SPF without DMARC enforcement and DKIM alignment still leaves room for impersonation and inconsistent receiver behavior.
It means monitoring mode only. Receivers can still accept spoofed messages, so p=none is useful for rollout but weak as a long-term protection setting.
MX records confirm mail-routing posture and help detect misconfiguration early. Missing or inconsistent MX can break assumptions in incident response and domain hygiene.
Scam checker
Check suspicious SMS, fake delivery updates, payment prompts and urgent verification messages to spot scam pressure before you click, pay or reply.
Open tool pageEmail review
Review suspicious senders, domain clues and phishing language to triage risky email campaigns before anyone opens links, attachments or login pages.
Open tool pageEmail header analyzer
Analyze suspicious email headers for SPF, DKIM, DMARC, Reply-To mismatch, Return-Path mismatch and relay-chain clues before trusting a message.
Open tool pageURL checker
Check suspicious links before you click with hostname, redirects, DNS, TLS, ASN, hosting provider and phishing-pattern analysis in one report.
Open tool pageBrand impersonation
Check suspicious domains, senders and fake support portals for brand impersonation, lookalike patterns, punycode, typosquatting and recent-registration risk.
Open tool pageRecovery center
Follow step-by-step recovery after phishing, hacked accounts, breach exposure, identity theft and scam incidents across Google, Microsoft, Meta and banking scenarios.
Open tool pageBreach checker
Check whether exposed email or reused passwords create real breach risk, then follow a practical 24-hour containment plan and next-step checklist.
Open tool pageIdentity theft planner
Build a step-by-step identity theft response plan after exposed personal data, fraudulent accounts, mailbox compromise, SIM swap or document leaks.
Open tool pageCrypto scam checker
Check suspicious crypto projects, fake exchange messages, guaranteed-return claims and recovery-fee demands before sending funds or identity documents.
Open tool pageRansomware triage
Triage encrypted-file incidents with isolation steps, ransom-note analysis, extension review, backup checks and decryptor guidance before recovery decisions.
Open tool pageReport incident
Submit suspicious phishing pages, malicious senders, brand impersonation attempts and emerging attack patterns so new scam clusters surface faster.
Open tool page