I built a free tool that checks if someone can send email pretending to be your business

Quick background: I run SecureBusinessHub, a plain-English cybersecurity

publication for small businesses. A lot of email fraud (fake invoices,

"urgent wire transfer" messages) works because it's trivial to send email

that looks like it's from a real company, and most small businesses have

no idea whether their own domain is protected against this.

I built a free checker: enter your domain, it tests your SPF, DKIM and DMARC

records and gives you a plain verdict — can someone spoof your business or

not — plus the specific fix if not. No signup, no email required.

securebusinesshub-com/tools/email-spoofing-check

Happy to answer questions about what the results mean if anyone runs it and

gets confused by the output — that's the actual point of building it this way

instead of a report full of DNS jargon.