Check a domain's SPF, DMARC, MX, NS, CAA, DNSSEC, and BIMI records in one pass, plus an optional DKIM lookup. Lookups run directly from your browser to Cloudflare's public DNS resolver (1.1.1.1) — nothing passes through or is stored on Carmedin's servers.
Checks SPF, DMARC, MX, NS, A/AAAA, CAA, DNSSEC, and BIMI in one pass.
DKIM requires knowing your mail provider's selector. Leave blank to try common selectors, or enter one if you know it.
Enter a domain on the left and click Check Domain Records to see results here.
Lists which mail servers are authorized to send email for your domain.
Cryptographically signs outgoing mail so receivers can verify it wasn't altered.
Tells receivers what to do when SPF or DKIM checks fail, and where to send reports.
Declares which servers actually receive mail for the domain.
The authoritative nameservers that answer for this domain.
Restricts which Certificate Authorities may issue TLS certs for the domain.
Cryptographically signs DNS responses to prevent spoofing and tampering.
Displays your verified brand logo in supporting inboxes. Requires DMARC enforcement.
This tool tells you what's missing. If you need it fixed — SPF, DKIM, DMARC, DNSSEC, or your wider infrastructure — that's exactly what we do.
Carmedin