Queries DNS-over-HTTPS for SPF, DKIM, DMARC, CAA, MX, TXT. Validates record syntax, flags weak DMARC policies, and reads the DMARCbis (2026) tags: np, psd, t, and sp.
Read the story behind this tool: DNS + Email Auth — Why Broken DMARC Quietly Kills Newsletter Deliverability →
New for 2026: DMARCbis, the new DMARC standard, and what actually changed for your domain →
Queries Cloudflare DNS-over-HTTPS for SPF (TXT), DMARC (_dmarc), CAA, MX, and DKIM. DKIM auto-scans ~65 common selectors in parallel (google, selector1/2, k1-k3, dkim1-5, s1-s10, em, pm, amazonses, etc.) so you don't need to know your selector. Only enter a selector name below if you know it; otherwise leave blank.