Intercept
Every incoming message is held at the door and read down to its headers, links, and intent — before it ever reaches you.
Every inbox is a signal. Spam is noise pretending to be signal. We crack the noise open — and leave the signal clean.
A filter asks “is this junk?” and guesses.
A cracker asks “what is this really?” — then proves it.
Put it to the test: crack your own domain, or read exactly how we grade in the Standard.
Every incoming message is held at the door and read down to its headers, links, and intent — before it ever reaches you.
We stress the message against dozens of signals — spoofing, urgency, obfuscation, reputation — until the disguise breaks.
Verdict delivered with the receipts. Real mail passes clean; noise is quarantined with a reason you can read.
Enter your domain and we run a live DNS forensics pass — SPF, DKIM, DMARC and MX — to see whether your mail is armored against spoofing, or wide open. Or switch to message mode and crack a single email.
Live DNS lookups over DoH. Read-only — we never touch your mail.
Trust comes from showing your work. Every domain is graded the same transparent way — no black box, no opinion. Here is exactly how a domain earns its grade under the SpamCrackers Standard v1.0.
| Pillar | What it proves | Full marks |
|---|---|---|
| SPF | Only authorized servers may send as you | ends in -all |
| DKIM | Messages carry a verifiable signature | key published |
| DMARC | Receivers are told to reject impostors | p=reject |
| MX | Mail is actually received and routed | resolves |
Sovereign by design. Every check runs entirely inside your browser, straight against public DNS. No domain you test, no result, and no email you paste ever reaches our servers — because there are none in the loop. Nothing is logged, stored, or sold. Your signal stays yours.
A live index of how recognizable domains score against the Standard — graded on their public policy records (SPF · DMARC · MX) the moment you scroll here. Want your own grade? Run a check.
Plain answers to what SPF, DKIM and DMARC really do — and what your grade means.
-all, enable DKIM signing in your mail provider, and add a DMARC record — starting at p=none to monitor, then raising it to quarantine and reject. Each result lists the exact fix for every gap.SpamCrackers is being built in the open. Drop your address and we'll save your place in the first wave.