ContactSupportLogin
SendmarcSendmarc shield icon in its brand colours
Free trialBook a demo
Free trial

Our Domain Checker Shows How Protected Your Domain Really Is

Most organizations assume their domain is protected. The Sendmarc domain checker tells you whether that assumption is correct, across SPF, DKIM, DMARC, and more – for free.

If you’re at risk of impersonation, one of our experts will be in touch to assist.

What Our Domain Checker Reviews

The domain checker analyzes six areas of your domain’s email authentication and security posture:

SPF

Confirms whether your domain has a valid SPF record and identifies configuration errors that allow unauthorized senders

DKIM

Verifies that a DKIM record is present and correctly configured to support cryptographic signing of outbound emails

DMARC

Checks your DMARC policy (p=none, p=quarantine, or p=reject) and whether it is enforced at a level that actively blocks spoofed emails

MTA-STS

Confirms whether your domain has an MTA-STS policy, which instructs receiving servers to only accept encrypted connections

TLS-RPT

Verifies that TLS-RPT is configured so you receive alerts when encrypted email delivery fails

BIMI

Checks whether your domain has a valid BIMI record that enables your brand logo to appear in supported email clients

Check your domain

What Your Domain Checker Result Means

Domain Checker Results | Sendmarc | Dmarc Protection And Security
Impersonation rating 5 out of 5

Strong Configuration

Your domain is correctly configured.

A strong domain checker rating confirms your baseline is solid. However, it doesn’t catch lookalike domains, compromised sending accounts, or configuration drift, all of which are easy to miss if you’re managing this yourself. Sendmarc can help you monitor those as well and maintain that baseline as your infrastructure evolves.

Impersonation rating 4 out of 5

Some Changes Needed

Your domain is nearing full enforcement.

Your authentication setup is mostly in place, but some gaps remain. Until they’re closed, cybercriminals can still exploit your domain to send fraudulent emails. Use the domain checker results to identify what needs to change.

Impersonation rating 0 to 3 out of 5

Action Required

Your domain is at high risk of impersonation.

Your current configuration leaves your domain open to spoofing and impersonation. Cybercriminals can use it to send fraudulent emails that appear to come from your business. Your domain checker results show exactly where the gaps are.

Book a demo to review your exposure

Book a demo

The Benefits of Regular Domain Checks

Running a domain check once is a start, but your environment doesn’t stay still. DNS records shift, new sending tools get added, and configurations degrade – often without triggering any alerts or prompting a review. Sendmarc monitors these changes continuously, so you don’t have to check them manually.

Sendmarc helps you:

Identify unauthorized
senders

Surface unapproved email-sending tools before they introduce authentication failures or create security exposure

Maintain visibility across DNS changes

Verify that SPF, DKIM, and DMARC records remain intact after infrastructure updates or provider migrations

Enforce centralized
control

Ensure that marketing, HR, finance, and other teams haven’t introduced unapproved senders that break authentication

Reduce manual investigation

Catch misconfigurations early, before they generate alerts or affect email flow

Improve email deliverability

Resolve authentication gaps so legitimate messages reach inboxes instead of Spam or Junk folders

Test your domainBook a demo

How To Use the Sendmarc Domain Checker

Our domain checker is designed to return clear, actionable results in under a minute.

Enter Your Domain

Type your domain name into the field and click Test your domain.

Review Your Results

Get an instant breakdown of your email security posture.

Understand Your Exposure

Your rating shows where your domain is configured correctly and where gaps remain.

Email Your Report

Send your domain checker results to your inbox, so you have a record of your setup.

Ready To Secure Your Company with DMARC?

Book a demo

Fill out the form below to book a 30-minute meeting with us, and we’ll take you through how we can help you protect your business against impersonation with seamless DMARC implementation and management.

Domain Checker FAQs

What is domain analysis?
Domain analysis is the process of examining a domain’s DNS records and authentication protocols, including SPF, DKIM, and DMARC, to assess its security posture and trustworthiness. A domain analysis identifies misconfigurations, enforcement gaps, and risks that could expose your organization to spoofing or impersonation.
How do I check a domain?
To check a domain, enter your domain name into the domain checker above and run the scan. The tool returns an instant breakdown of your security posture and flags any configuration issues that need attention.
What does a 5/5 score mean?
Your SPF and DKIM records are correctly configured, and your DMARC policy is set to the right enforcement level. That means spoofed emails from your registered domain are blocked before they reach recipients.
How often should I run a domain check?
Run a domain check after every major DNS change, such as a new sending platform or provider migration – these are common causes of silent configuration drift. With Sendmarc, you don’t need to monitor this manually: continuous monitoring automatically detects changes and alerts you in real time, so your domain stays protected even as your infrastructure evolves.
Are domain checker tools free?
Sendmarc’s domain checker is free and requires no sign-up. For a deeper view of your exposure, Sendmarc also provides a free two-week exposure report that details the threats your domain faces and the steps needed to address them.