Tools / SPF, DKIM & DMARC Checker

SPF, DKIM & DMARC Checker

Can someone send email pretending to be your domain? Enter a domain to get an email security grade, the records that are missing or broken, and the exact DNS record to fix each one.

● DNS lookups go straight from your browser to Cloudflare's public resolver (1.1.1.1). OpsVantage sees nothing.

Extra DKIM selector (optional):

What gets checked

SPF

One valid record, a strict ending (-all), and fewer than 10 DNS lookups so receivers don't reject it with a permerror.

DMARC

The policy that tells receivers to quarantine or reject spoofed mail, whether it covers 100% of mail, and whether you get reports.

DKIM & extras

Signing keys on 20+ common selectors (Microsoft 365, Google, SendGrid, Mailchimp and more) and their strength, plus MTA-STS, TLS-RPT and BIMI.

Got a suspicious email claiming to be from a domain?

Paste its headers into the Email Header Analyzer to see whether it actually passed these checks.

Analyze headers