Free · No sign-up required

DNS & email security checker

Enter your domain and we’ll show your DNS records, your SPF and DMARC settings, and whether your emails are protected against spoofing.

Only public DNS records are queried; just enter your domain name.

Why do SPF and DMARC matter?

SPF specifies which servers may send email on behalf of your domain; DMARC specifies what happens to emails that fail these checks. Without them, your emails may land in spam and fraudsters can send emails in your name.

Gmail and Yahoo require SPF, DKIM and DMARC from domains that send bulk email; these records are now essential for deliverability.

  • A and AAAA (IPv6) records
  • MX: mail servers
  • NS: name servers
  • SPF: validity, “all” ending and the 10-lookup limit
  • DMARC: policy (none, quarantine, reject)
  • CAA and verification records (Search Console, Microsoft 365, Meta)

Frequently asked questions

Is a DMARC “none” policy enough?
The “none” policy only reports; it does not block spoofed e-mails. After reviewing the reports, set the policy to quarantine or reject.
How many includes can SPF have?
SPF validation allows at most 10 DNS lookups; each include, a, mx, ptr and exists mechanism counts as a lookup. If the limit is exceeded, SPF fails.
When do DNS changes take effect?
Depending on the record’s TTL, they propagate within a few minutes to 48 hours.

See where your site stands in 20 seconds.

Find your technical issues and AI visibility gaps with a free analysis, then leave the fixing to AutoAiSeo.

  • No card required
  • 5-minute setup
  • Cancel anytime
Analyze for free