AnswerCite

AnswerCite Email Fail Simulator

Watch your domain get spoofed - then fix it with proof. We simulate what a real attacker does (recon → spoof → inbox) based on your live DNS posture, then generate an AnswerCite bundle: the exact change to make, plus the standard that backs it.

Recon
Attacker checks DMARC/SPF/DKIM posture and finds the soft spot.
Spoof / Phish
They forge ceo@yourdomain and tune headers to slip through.
Inbox outcome
We estimate how often it lands undetected across major inboxes.
AnswerCite fix
Copy DNS + test live + download an evidence card for stakeholders.
No login. No tracking. Runs in your browser using DNS-over-HTTPS, and exports the raw evidence we used.
Hacker mode = attacker thinking. Toggle it on to expand the simulated playbook into tactics, edge-cases, and “how they’d actually try it” - without changing the underlying scan.
No login. No tracking. DNS lookups only. Runs in your browser.

How it works

1) Pull posture

We check DMARC, SPF, DKIM (heuristic), MTA‑STS and TLS‑RPT via public DNS-over-HTTPS.

2) Simulate failure

We estimate spoof “inbox land rate” based on your policy posture (not real deliverability testing).

3) AnswerCite

For each weakness, you get an actionable fix, cited references, plus a downloadable evidence bundle.

Turn the simulation into reality

Vigo’s Email Trust Cleanup tightens SPF, DKIM, DMARC and basic transport controls so your domain is harder to spoof and easier to manage.

Fastest win if spoofing, phishing, or deliverability is on your mind.