Ingenix
← All tools
13 / EMAIL SECURITY

SPF / DKIM / DMARC Inspector

Inspect a domain's email authentication records, trace SPF includes, inspect DKIM selectors and flag configuration problems worth investigating.

Enter selectors used by your mail providers. Common selectors are checked by default.

Queries are made from your browser using DNS-over-HTTPS. No email is sent and no credentials are required.

What this checks

SPFSyntax, duplicate records, recursive includes, DNS lookup pressure, missing include targets, terminal policy and risky +all/?all configurations.
DKIMSelector reachability, TXT syntax, public-key presence, revoked keys and key type. DKIM signing itself can only be confirmed from message headers.
DMARCPolicy, alignment modes, reporting destinations, subdomain policy, percentage rollout and common deployment gaps.

This is a DNS configuration inspector, not a complete mail-flow or deliverability test. Recommendations are engineering checks and should be validated against the domain's actual mail-sending services before changing DNS.