Email security
SPF record published
SPF, DMARC, DKIM, MTA-STS: protection against spoofed mail in your name.
Why it matters
Without SPF, anyone can send mail that appears to come from your domain. Phishing and invoice fraud in your name damage customers' trust, and your real mail is more likely to land in spam.
How to fix it
Quick fix · under 1 hour- List every service that sends mail as your domain (mail provider, newsletter, invoicing, website).
- Publish one TXT record on the domain that includes them and ends in -all.
- If the domain sends no mail at all, publish 'v=spf1 -all'.
DNS TXT (Google Workspace)
example.com. TXT "v=spf1 include:_spf.google.com -all"
DNS TXT (Microsoft 365)
example.com. TXT "v=spf1 include:spf.protection.outlook.com -all"
DNS TXT (no mail)
example.com. TXT "v=spf1 -all"
Test this now, free: SPF, DMARC & DKIM checker - no sign-up.
How we test it
The check runs from the public internet as part of every scan, read-only and without touching your data. If it fails, your report shows the evidence that proves it - the record, header, file or banner we observed - together with the fix above, tailored to the issue we found.
Does your domain pass this check?
Run all 97 checks in about a minute. Your first scan is free, with the complete fix for your most urgent finding.
Scan your domain free