Free tool · No sign-up
Could someone send email as you?
Type your domain or email address. In a few seconds you'll see whether scammers can fake your address, how well your website is locked down, and when your domain is up for renewal.
- Fake email Whether inboxes would block an email that pretends to come from you.
- Website security Your security certificate, encryption and the protections your site switches on.
- Your domain When it's up for renewal, and whether it's locked against theft.
Checking
your domain
- Finding where your email goes
- Checking who can send as you
- Inspecting your website's security
- Reading your domain registration
0 s
Waking the checker up. The first check after a quiet spell can take up to a minute.
How it works
The locks a scammer looks for first.
Fake invoices from a real business's address, a lapsed domain, a certificate warning: these are the problems small businesses run into most. This check looks for each of them.
- 01
We read your public records
Your DNS records, your domain's registration and your home page, the same things anyone on the internet can see.
- 02
We test them like an inbox would
SPF, DKIM and DMARC for email, your certificate and security settings for the website, renewal and lock for the domain.
- 03
You get a report
What's protected, what isn't, and how to fix each gap, including where the setting lives at your email provider.
Does it try to break in?
No. It only reads information that's already public. It doesn't sign in, guess passwords or probe your site for weaknesses, and nothing on your site or email changes.
Do you keep the domains I check?
No. Sorrel doesn't save the domains you check or the reports. Your latest report stays in this browser tab until you close it. To read your renewal date, we ask your domain's registry, the same lookup anyone can make.
What are SPF, DKIM and DMARC?
Three DNS records that work together. SPF lists the servers allowed to send your email, DKIM signs each message, and DMARC tells inboxes what to do with email that fails both: let it through, send it to spam or block it.
Can you fix what it finds?
Yes. Send us the report from the results and we'll reply with a plan and a price before any work starts.