← Back to tools

Email Spoof Tester

Sends a controlled spoofed message from security@<domain> to a recipient you control. Use it to validate whether SPF, DKIM, and DMARC actually prevent spoofed messages from landing in the inbox.

Sender will be security@domain.
Must be an inbox you own — you will inspect the resulting headers.