DNS CSVdns-csv.com
Published SPF, DKIM, and DMARC

SPF, DKIM
& DMARC

See the mail-auth records published in DNS: SPF and DMARC TXT records, and DKIM on a fixed set of selectors. The same lookup still inventories the rest of the domain, including CAA and HTTPS.

This checks published DNS. It does not verify a DKIM signature on an email, and it does not score SPF or DMARC alignment for a message. Free is 3 lookups a day.

Custom hostnames

Optional. One per line, or separated by commas or spaces. A bare label is probed under the domain you look up (staging → staging.example.com). A full name must belong to that domain — names outside it are skipped.

Leave blank to probe only the built-in common hosts and mail-auth names.

Lookup mode

Multi-domain lookup is included on paid plans.
AAAAACNAMEMXNSTXTSOASRVCAAHTTPS
DNS-over-HTTPSCSV · JSON · XMLInstant resultsCustom hostnames

Simple, transparent pricing

Free is 3 browser lookups a day. Paid plans add the API and saved scan history. Growth and Scale add scheduled monitoring.

Save 20% annually

Free

$0

No credit card required

Get started with no commitment

  • 3 browser lookups / day
  • All record types (A, MX, TXT…)
  • CSV, JSON, XML export
  • Unlimited browser lookups
  • API access
  • Scan history
  • Scheduled cron jobs

Pro

$9.99/mo

Billed monthly

For individuals and small teams

  • Unlimited browser lookups
  • All record types (A, MX, TXT…)
  • CSV, JSON, XML, PDF export
  • 1,000 API lookups / month
  • Bulk lookup (10 domains)
  • 30-day scan history
  • Scheduled cron jobs
Most popular

Growth

$49.99/mo

Billed monthly

For growing teams and automation

  • Unlimited browser lookups
  • All record types (A, MX, TXT…)
  • CSV, JSON, XML, PDF export
  • 10,000 API lookups / month
  • Bulk lookup (50 domains)
  • 90-day scan history + diff view
  • 5 scheduled cron jobs

Scale

$199.99/mo

Billed monthly

For high-volume and enterprise use

  • Unlimited browser lookups
  • All record types (A, MX, TXT…)
  • CSV, JSON, XML, PDF export
  • 100,000 API lookups / month
  • Bulk lookup (100 domains)
  • 365-day scan history + diff view
  • 25 scheduled cron jobs

All plans include DNS-over-HTTPS queries. No credit card required for Free.

What this checker looks up

SPF is read from TXT records on the apex, and from the _spf name when that name exists. DMARC is the TXT record at _dmarc. DKIM is checked at a fixed list of selectors under _domainkey, covering common mailbox and ESP names such as Google and Microsoft 365. The list is not every selector that exists.

Built-in mail-auth names are queried for TXT after a CNAME check. If the name is a CNAME, the row is that CNAME. The lookup does not fetch the TXT published at the CNAME target. Amazon SES Easy DKIM uses a per-identity token, so it appears only if you paste that selector as a custom hostname.

The same scan includes MX and the rest of the inventory, including CAA and HTTPS on the apex. Filter the table to TXT when you want the mail-auth rows. Each exported row keeps its TTL and provenance.

Questions

Does this verify DKIM signatures?
This lookup does not verify DKIM signatures on an email message. It shows the DKIM DNS record published at the selectors it probes. A missing selector means that name was not in the built-in list or returned no record.
Which DKIM selectors are included?
A fixed public list used by common mailbox providers and ESPs, including Google and Microsoft 365 selector1 and selector2. It is not exhaustive. Paste selector._domainkey in custom hostnames to probe a selector that is not on the list.
Why do I see a CNAME instead of a DKIM TXT record?
Many providers publish DKIM as a CNAME. The checker shows that CNAME and does not request the TXT at the target. Addresses followed from a CNAME elsewhere in the inventory are labeled resolved.
Does the page show the SPF mechanisms and DMARC policy?
It shows the published TXT value. That value is where the SPF mechanisms and the DMARC policy, such as p=none or p=reject, are stored. The checker does not simulate whether a given message would pass.

Other lookups