Email Auditor
Audit a domain's SPF, DMARC, DKIM and MX, with traffic-lights and an overall grade. All via Cloudflare DoH.
Enter a domain to audit its email setup.
About this tool
The Email Auditor checks a domain's anti-fraud setup: SPF, DKIM, DMARC and MX records. It gives you a status light per mechanism and an overall score so you know whether your email is well protected against spoofing and likely to reach the inbox.
- Spot a missing SPF, too many lookups, or a weak ending (~all vs -all).
- Check the DMARC policy (none, quarantine, reject) and whether you receive reports.
- Confirm MX records exist and the domain can actually receive mail.
Frequently asked questions
Why do my emails end up in spam?
The most common cause is an incomplete SPF, DKIM or DMARC setup. If any of the three fails, providers like Gmail or Outlook distrust the sender. This tool tells you which one fails and your overall score.
What is the difference between SPF, DKIM and DMARC?
SPF defines which servers may send on your behalf, DKIM signs the message to prove it was not altered, and DMARC tells the receiver what to do if SPF or DKIM fail. Together they are the foundation of deliverability.
Do I need strict policies like -all and p=reject?
That is the end goal, but reach it in phases: start monitoring with p=none and review the reports, then tighten to quarantine or reject once you are sure all legitimate mail passes.