🔍 DNS & Email Security Scanner
Perform DNS lookups and analyze SPF, DKIM, and DMARC records for email security assessment.
100% Client-Side via Cloudflare DNS API
Try:
Scanning...
SPF (Sender Policy Framework)
Specifies which mail servers can send email for the domain.
# Example SPF record:
v=spf1 include:_spf.google.com ~all
+all = Pass all (dangerous)~all = Soft fail-all = Hard fail (strict)?all = NeutralDKIM (DomainKeys Identified Mail)
Cryptographically signs emails to verify sender authenticity.
# DKIM selector record (e.g., selector1._domainkey.domain.com):
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEB...
Common selectors:
default, selector1, selector2, google, k1 DMARC (Domain-based Message Authentication)
Tells receivers what to do when SPF/DKIM checks fail.
# Example DMARC record (_dmarc.domain.com):
v=DMARC1; p=reject; rua=mailto:dmarc@domain.com
p=none = Monitor onlyp=quarantine = Spam folderp=reject = Block (best)