warnwell

Warnwell / Checks

Can your domain be spoofed? Test it

Warnwell sends no test email. It reads the public records that decide whether Gmail and Outlook deliver a fake "from" your domain, and tells you the answer and the fix.

  • Free
  • No sign-up
  • Up to 50 domains at once

01

How the answer is decided

Whether a forged message from ceo@yourdomain.com reaches an inbox depends almost entirely on the domain's DMARC policy. SPF and DKIM say which mail is real. DMARC tells the receiver what to do with the rest.

Domain setupResult
No DMARC record, or p=noneAnyone can send email as @yourdomain
p=quarantineFake email goes to spam, not away
p=rejectProtected against fake email
p=reject, v=spf1 -all and a null MX, on a domain that sends no mailLocked down: takes no mail, fakes rejected

An SPF record ending in +all is flagged separately, because it lets any server pass SPF.

02

The domains people forget

When we ran this on our own 85 domains in October 2026, 52 could be used to send fake email. 32 of them send no mail at all: old projects and names bought for later. Those are the easy ones. Three DNS records each, about five minutes, and the records are here.

The domains you do send from take longer, because moving to p=reject too fast can block your own newsletters or invoices. Warnwell lists which domains have mail set up so you know which group each one is in.

03

Questions

Does this send a spoofed email to test?
No. Sending fakes would prove the same thing less reliably, because each receiver filters differently. The records are what receivers read, so Warnwell reads them too.
Can a subdomain be spoofed if the main domain is protected?
DMARC on the main domain covers subdomains unless the record sets sp= to something weaker. Paste the subdomain to see its own records.
Gmail put my test fake in spam even with p=none. Am I safe?
Not reliably. Gmail's own filters caught that one message. A careful fake, or a smaller mail provider, can still deliver it. p=reject makes every major receiver refuse it.
04

Updated 20 Oct 2026.