Tools / SPF / DKIM / DMARC

SPF / DKIM / DMARC checker

A review of key email-authentication and transport-security signals for a domain. The score covers five checks; additional records are inspected for context.

What it reads

SPF — the record, its all qualifier, and the DNS-lookup count (RFC limit is 10).
DMARC — p / sp / pct and whether aggregate reporting (rua) is set. p=none is flagged as monitoring-only.
DKIM — probes ~30 well-known selectors (Google, Microsoft, Amazon SES, Mailchimp, SendGrid, Zoho, Proton, Fastmail…). A miss is not proof of absence.
MTA-STS and TLS-RPT — protection against inbound-mail downgrade attacks.
BIMI and the MX set (additional context; not included in the score).

Score

One point each for: SPF present, DMARC at quarantine/reject, any DKIM, MTA-STS, TLS-RPT → A+ down to F.