DMARC, SPF
& DKIM CHECKER
// PUBLIC EMAIL RECORDS · HTTPS REACHABILITY · CLEARER NEXT STEPS //
Check your domain’s public email authentication records, explore common DKIM selectors, and test browser HTTPS reachability. Review the findings before planning changes.
Scans start only when you press Scan or Enter. DNS queries go to Cloudflare; the HTTPS check contacts your domain. Results stay in this page.
What this domain checker examines
DMARC-able reads public DNS records through Cloudflare DNS-over-HTTPS. It does not send email, verify a mailbox, or change your DNS configuration.
DMARC and SPF
Review the published DMARC policy, reporting address and percentage, plus common SPF configuration signals. The checker does not evaluate message alignment or recursively resolve every SPF lookup.
DKIM and MX
Look for DKIM keys at 15 common selectors and inspect mail exchanger records. An undiscovered selector does not prove that DKIM is absent; confirm selectors with your email provider.
HTTPS and the health score
The optional HTTPS check is a browser connection probe. Browser restrictions can affect it; it does not inspect certificate expiry, chains or cipher suites. The score summarizes these checks and is not a security certification.
Using your results
Confirm findings with your email provider before changing authentication policies. Report wording and suggested outreach are starting points for review, not proof that a domain is vulnerable or protected.