Email impersonation
Checking…Could criminals send emails that look like they came from you?
Free security check for small businesses
How easy is your business to impersonate?
In under a minute, see whether criminals can send email as you, whether your website is properly protected, and whether look-alike domains are already registered — with plain-English fixes.
Passive checks only — we read public DNS records and load your homepage once. Nothing intrusive, no signup. Protected by Cloudflare Turnstile.
ShoreGuard security report · prepared
…
Scanning
—
Checking email, DNS, website and look-alike domains…
- 0 high risk
- 0 other risks
- 0 protected
Your biggest risks
Website safety
Checking…Is your website safe for customers to use and trust?
Domain foundations
Checking…Is the system that points people to your website and email reliable and tamper-proof?
Copycat domains
Checking…Are there web addresses one typo away from yours that scammers could use?
Results reflect public information at the time of the scan and are not a full security audit. Scanned .
Don't have time to fix it yourself?
Get it fixed — and watched
- We fix it for you: we switch on the email protections that stop criminals pretending to be you, secure your website settings and close the gaps in your report.
- Weekly monitoring: we re-scan your domain every week and alert you the moment something changes — or a new look-alike domain appears.
- Plain English: no jargon, no long contracts. Built for small businesses, schools, clinics and non-profits.
What we check
Email authentication
SPF, DKIM and DMARC decide whether a fake “invoice” or “payment change” email using your name lands in your customers' inboxes. We also check encrypted delivery (MTA-STS, TLS-RPT).
Website protection
HTTPS, redirects, HSTS, Content-Security-Policy, clickjacking protection, cookie flags and whether your software versions are on show.
Domain & DNS
DNSSEC, certificate authority restrictions (CAA) and name-server redundancy — the plumbing that keeps your site and email reachable and trustworthy.
Look-alike domains
Typos, swapped letters and other endings (.net, .co, .icu…) that scammers register to impersonate you.
Is it safe and legal to scan any domain?
Yes. Everything we check is public information that any email server or web browser sees every day. We don't probe ports, try passwords or look for vulnerabilities.
Do you store my results?
We keep a simple log of which domains were scanned and their grade so we can improve the service. Contact details are stored only if you fill in the form. See our privacy notice.
My grade is bad. Should I panic?
No — most small businesses we scan have gaps. The “Your biggest risks” list shows what matters most, and most issues are quick for an IT professional to fix — we can do it for you.