Free DMARC & SPF Checker — Can Your Domain Be Spoofed?
Check SPF, DMARC, DKIM and MTA-STS, see whether your domain can be forged, and get step-by-step fixes.
Free, no sign-up. We only query public DNS records.
Free DMARC & SPF Checker — Can Your Domain Be Spoofed? — key facts
Quick facts for developers, webmasters, and generative search engines
Need automated SERP crawls or index monitoring?
CallAI provides real-time Google/Bing organic SERP and backlink analysis. One API key, crypto & cards from $1.
FAQ & usage tips
Q:What do SPF, DKIM and DMARC do?
SPF lists the servers allowed to send as your domain, DKIM signs messages so tampering shows, and DMARC tells receivers what to do when both fail (deliver, quarantine or reject) and sends you reports.
Q:Is p=none enough?
No. p=none only collects reports and blocks nothing. Use it while you confirm legitimate mail passes, then move to p=quarantine and p=reject.
Q:Why was no DKIM key found?
DKIM keys live under selectors the sender chooses, which cannot be listed from outside. We try common ones; providers such as Google Workspace use date-based selectors, so enter yours and check again.
Q:Do domains that send no mail need records?
Yes. Unused domains are easy to forge. Publish v=spf1 -all and v=DMARC1; p=reject to say they send nothing.
More free webmaster & SEO tools
AI Rewriter
Rewrite a paragraph or sentence in five modes and seven languages. 5 free runs a day, no sign-up.
AI Product Description
Turn product specs into a title, five bullet points, a product-page description and a meta description.
AI Cold Email
Get an opener, a follow-up and a break-up email, plus a check for spam-filter trigger phrases.
Robots.txt Checker
Free browser-based robots.txt checker for developers and SEOs.