SPF
Lists the servers allowed to send email for your domain. Without it, or set too loosely, anyone can claim to be you.
Free tool · No sign-up
Can someone send email as your company?
If your domain has no enforced DMARC, scammers can send phishing emails that look like they come from you — to your customers, your staff and your suppliers. Check your domain in seconds.
SPF · DKIM · DMARC
Check your domain
Enter your domain or an email address. We read only the public records every mail server already sees.
Free tool · No sign-up
Check your domain
Enter your domain or an email address. We read only the public records every mail server already sees.
What the three records do
DKIM
Signs your messages so the receiver can prove they really came from your domain and weren't changed on the way.
DMARC
Ties SPF and DKIM together and tells receivers what to do with forged mail — the single most important setting, and the one most Libyan domains are missing.
Why this matters in Libya
Most business here runs over email and WhatsApp, and almost no Libyan company has enforced DMARC. That makes CEO-fraud emails, fake supplier invoices and ministry-impersonation messages easy and cheap. Fixing these three records is the highest-value, lowest-cost security step a business can take.
Want us to fix and watch it for you?
Our managed email protection sets up SPF, DKIM and DMARC correctly, then monitors your domain every month.
Talk to us
Get your email protected
Tell us your domain and we'll set up full protection and confirm by phone or WhatsApp.