IP Lookup Tools Email Security

SPF, DKIM and DMARC check

Audit the records that keep your domain's email out of the spam folder and stop it being spoofed. Every missing or faulty record comes with ready-to-paste text.

Enter the domain that sends the email.

What is checked?

SPF: record validity, include chain and the 10 DNS lookup limit
DKIM: common selectors and key length
DMARC: policy, reporting addresses and percentage
Presence of MTA-STS and BIMI
MX target resolution and reverse DNS

How do I read the result?

With a DMARC policy of none, spoofed email is not blocked; aim for quarantine or reject.
More than 10 DNS lookups in SPF invalidates the record.
A DKIM not found result can mislead if you use a different selector.

Frequently asked questions

How is DKIM found?

A selector name cannot be guessed unless known; we try the nine most common: default, google, selector1, selector2, k1, mail, dkim, s1 and s2.