Whoever set your email up published these records in public. These read them back to you in a second — the record itself, exactly as it stands, and what it means in one line.
We show what is published, and when we read it. Where a record cannot be read we say so rather than calling it missing, and we never label a domain safe or unsafe.
Can someone send email that looks like it came from you? Your SPF, DKIM and DMARC records read together, answered in one line.
Your policy, read exactly as published. p=none puts a record in place but enforces nothing — and we say so rather than calling it protected.
The record as published, and the DNS lookup count against SPF’s hard limit of ten. Past ten it stops working quietly.
The selectors mail providers actually use. DNS cannot list selectors, so a miss never proves absence — the result says which we tried.
Where your mail is delivered, in priority order, with each hostname resolved.
Everything a business has published — its website, catalogue, map listing and the nearest in its trade — in one read.
It reads all four records at once and tells you whether a forged message from your address would be delivered or refused. The other four are there for when you want one record on its own.
These stay free. If the answer points at work you would rather not do yourself, the price is written down before anything is touched.
Run the spoofing test