Email Security Checker
All checks run through Google/Cloudflare public DNS resolvers. SPF, DKIM and DMARC are the three pillars of email authentication — every domain that sends mail should have all three.
About the Email Security Checker
How to use it
1. Enter the domain you want to test (e.g. yourbank.com). 2. Click Check — the tool queries its DNS records through public resolvers. 3. Read the rating and each section: mail servers, SPF, DKIM, DMARC, transport extras and blacklist status. 4. Copy any record to investigate further.
Why these checks matter
SPF, DKIM and DMARC are the three pillars of email authentication. Without them, criminals can send email that looks like it comes from the domain — the classic phishing technique. The policy details (soft vs hard fail, none vs quarantine vs reject) show how strictly the domain actually enforces its own rules.
Blacklists (RBL)
Mail servers appearing on Spamhaus, SpamCop, Barracuda or SORBS have their email silently rejected or spammed by most of the world's inboxes. This tool checks the mail servers' IPs directly. Note that the check runs through public resolvers, and some RBLs limit their answers.
Limitations
DKIM selectors are provider-specific — the tool probes the most common ones (google, selector1, zoho…), but a domain may use a selector not in the list. MTA-STS and BIMI are optional extras: their absence is common and not itself a vulnerability.