SPF: Who May Send
A public list of servers allowed to send email for your domain. Missing or loose, and anyone qualifies.
Free Tool · Email Security Checker
Could criminals send email as your business?
If your domain's SPF, DKIM and DMARC records are missing or misconfigured, anyone can send invoices and messages that appear to come from you. Enter your domain and we will check the three records that decide whether that is possible.
⚡ Instant Check
📧 SPF · DKIM · DMARC
🔒 Runs in Your Browser
★ By Ocean Computers IT
Checks public DNS records only · the same information every mail server on the internet already sees
What We Check
Four records decide who can send as you
Email spoofing is not exotic hacking, it is exploiting missing settings. These are the four we check, in plain language.
DKIM: The Signature
A cryptographic signature that proves a message really left your systems and was not altered on the way.
DMARC: The Enforcer
The rule that tells the world what to do with fakes: deliver, quarantine or reject. Without it, fakes get delivered.
MX: Your Mail Service
Confirms your domain is set up to receive email properly in the first place.
Better Deliverability
The same records that stop spoofing also keep your real email out of customers’ spam folders.
An Honest Read
We show exactly what your public records say, pass, warn or fail, with no scare tactics.
Why This Matters
Spoofed email is how businesses get robbed
Fake invoices, payroll redirects, gift card scams: nearly all of them ride on domains that never set up these records.
Your customers get the fake invoice
Attackers send your clients an invoice from you with new bank details. Missing DMARC is what makes it land.
Your own staff get fooled
An email from the boss asking for a wire or gift cards works far better when it really shows your domain.
Your real email goes to spam
Without SPF and DKIM, mail providers trust you less, and your legitimate messages quietly disappear into junk.
It is invisible until it is not
Nothing feels wrong day to day. The first sign is usually an angry customer or a missing payment.
The fix is configuration, not software
Closing these gaps is DNS records and mail settings done correctly, usually within days.
Monitor-only is not protection
A DMARC policy of p=none watches the fakes go by. Enforcement is what actually stops them.
How It Works
From spoofable to protected
01
Check
Enter your domain above. Results appear in seconds.
02
Send It
Share your result and we reply with a free, specific fix plan for your domain.
03
We Configure
We set up SPF, DKIM and DMARC properly, carefully, so real mail keeps flowing.
04
Enforced
Fakes get rejected, your mail gets delivered, and you can prove it.
If you fail this check, so does everyone pretending to be you. Fix that.
Proper SPF, DKIM and DMARC shut spoofers down and get your real email delivered. We set it up right.
Why Ocean Computers
Why have Ocean Computers fix it
These records are easy to get wrong and quietly break real email. We do this carefully, for a living.
Done without breaking email
The risk in DIY is blocking your own mail. We roll out enforcement carefully, monitoring first, then tightening.
Every sender accounted for
Your website forms, invoicing app and newsletter tool all send as you. We find and authorize them all.
Enforcement, not decoration
We do not stop at p=none. The goal is a policy that actually rejects fakes.
Deliverability bonus
Customers who did this are often surprised how much more of their real email lands in inboxes.
since 2004 with business email
Two decades of mail systems, migrations and security across every major platform.
Remote anywhere, onsite in San Diego
Email security is fixed remotely for businesses anywhere in the country, with onsite help across all fifty states.
Questions
Email security, answered
Is this check safe to run?
Yes. It reads only public DNS records, the exact same information every mail server on the internet looks up whenever your domain sends email. Nothing touches your mailbox or systems.
Do you see my domain or results?
Not unless you send them. The check runs in your browser against public DNS. Your domain and results only reach us if you submit the form for your free fix plan.
My DKIM says not detected but I think we have it. Why?
DKIM lives under a selector name we cannot always guess. We probe the most common ones, so a custom selector can show as not detected even when DKIM exists. Send us the result and we will confirm it properly.
What does a DMARC policy of p=none mean?
It means DMARC exists but only monitors. Fakes are still delivered. It is the right first step during setup, but staying there permanently leaves you spoofable.
Will fixing these records break my real email?
Done carelessly, it can, which is exactly why we roll out in stages: authorize every real sender first, monitor, then enforce. Your mail keeps flowing the whole time.
How long does the fix take?
Most domains are correctly configured within days, with enforcement tightened over the following weeks as monitoring confirms every legitimate sender is covered.
We use Microsoft 365 or Google Workspace. Does this still apply?
Yes. Both platforms support SPF, DKIM and DMARC fully, but none of it is enforced automatically. Someone has to set it up, and that is what we do.
Free Tools
More free tools from Ocean Computers
No email walls, no tricks. Useful tools that run right in your browser.
Your Free Fix
Let’s make your domain spoof-proof.
Send your check result and we will reply with a free, specific fix plan for your domain, then set it up carefully if you want our help. Or just call.
(858) 429-1311Fixes done remotely for businesses anywhere · Onsite across all fifty states
Get my free email security fix
A few details and we’ll get right back to you to help.