Services Design Concepts Free Tools About Contact Deutsch Free SEO Check
Free & no sign-up required

SPF, DKIM & DMARC Check

Does your domain send secure email — and can nobody forge messages in your name? Enter your domain and we instantly check MX, SPF, DKIM and DMARC, with plain-language explanations of what is fine and what you should improve.

Checking DNS records …

Email not set up correctly?

Incorrect or missing SPF/DKIM/DMARC records cause your mail to land in spam — or let scammers write in your name. We set up your business email with Microsoft 365 correctly and securely.

Thank you! We will be in touch shortly.

By submitting you agree to our Privacy Policy.

Professional email & website from one partner

WEBINEX sets up Microsoft 365, domains and websites for Swiss SMEs — secure, GDPR/nDSG-compliant and with no technical stress for you.

Free Website Check

What do MX, SPF, DKIM and DMARC mean?

MX (Mail Exchange) defines which server receives your domain email. Without an MX record, your domain cannot receive mail.

SPF defines which servers may send in your name. Without SPF, others can more easily forge email from your address — and your real mail lands in spam more often.

DKIM adds a digital signature to outgoing mail so the recipient can verify it really comes from you and was not altered in transit.

DMARC combines SPF and DKIM with a rule: what should happen when a message fails the check? Only with DMARC are you effectively protected against domain spoofing.

Frequently Asked Questions

Why do my emails land in spam?

Very often SPF, DKIM or DMARC are missing or wrong. Receiving servers treat mail without these proofs as suspicious. This check shows you which building block is missing.

What is domain spoofing?

In spoofing, scammers send email using your domain as the sender, e.g. for invoice fraud. Correctly configured SPF, DKIM and DMARC records (with policy „quarantine" or „reject") largely prevent this.

Mein DKIM wird als „nicht gefunden" angezeigt — ist das schlimm?

Not necessarily. DKIM is published via a so-called selector that differs by provider. We check the common selectors from Microsoft 365 and Google. If nothing is found, DKIM may still be active under a different selector — best to have your provider or us check.

Is my data stored?

No. The query runs live via public DNS servers (DNS-over-HTTPS) directly from your browser. We store neither the domain nor the result.