Can someone send email pretending to be you?
Enter your domain (the one in your email address or your organisation’s). The tool reads public DNS records (SPF, DMARC, MX, DKIM) and explains plainly whether a fake email in your name would be blocked, with the exact records to add.
Read your DMARC reports (in this browser)
Mailboxes send a daily report to your DMARC “rua” address (.xml, .xml.gz or .zip file). Open it here to see who sends email in the domain’s name. The file is read by your browser and sent nowhere.
Anti-phishing guide
Fake manager asking for a payment
An "urgent and confidential" message asks to pay a supplier or change bank details. Call the person on their usual number before any payment, never the one in the message.
Fake invoice or subscription
An email says an account is blocked or a sum must be paid through a link. Do not click: open the official site yourself by typing its address, and check the exact sender.
Fake password reset message
"Your account will be closed, confirm your password." If you did not ask for it, ignore it. Go to the service directly and turn on two-factor authentication.
Good habits
Look at the sender’s real address, be wary of urgency, never share a code received by SMS, and warn the people around you or your colleagues.
- 17Cyber : Victim of hacking, online fraud or ransomware: first diagnosis and referral, 24/7 (France).
- Signal Spam : Report a fraudulent or phishing email (France).