SPF / DKIM / DMARC Check
Check SPF, DKIM and DMARC records for any domain, parse their values, and get a plain-English explanation of what is protected — and what is missing. Queries run over DNS-over-HTTPS.
Scan a well-configured domain
Check the DNS records for google.com and see why its email authentication is graded as strong.
Requires an internet connection. The records are fetched live via DNS-over-HTTPS.
FAQ
What are SPF, DKIM and DMARC?
They are DNS-based standards that prove an email is legitimate. SPF lists which servers may send, DKIM adds a signed header that verifies the sender, and DMARC tells receivers what to do when those checks fail.
What does a good setup look like?
An SPF record with a hard fail (-all), a published DKIM key, and a DMARC policy of reject (or quarantine) — that combination makes your domain hard to spoof.
Why does my domain score weak?
Usually a missing SPF or DMARC record, an SPF rule that doesn’t enforce a fail, or a DMARC policy set to “none”, which only monitors and doesn’t reject forged mail.
Does this tool read my email?
No. It only looks at publicly published DNS records for the domain you type. It never connects to your email account or reads any message.