Anayil Toolbox

Diagnostic utilities for DNS, networking, security and development. Choose a tool and work without leaving this page.

Review authentication records published in DNS. This checks visible TXT data; it does not send email or guarantee delivery.

These three standards work together to reduce domain spoofing and help receiving mail servers decide how to handle unauthenticated messages.

SPF

SPF lists which servers may send email for your domain. It is published as a TXT record in DNS.

DKIM

DKIM lets receivers verify a message signature linked to your domain. Its public key is looked up using a selector, usually at selector._domainkey.

DMARC

DMARC checks alignment with SPF or DKIM and sets a policy for messages that fail. It can also send aggregate reports.

How to fix findings

1.Confirm with your email provider every service authorized to send for your domain.
2.Correct TXT records at your authoritative DNS provider. Use the exact record name and publish only one SPF policy.
3.Check again after DNS propagation. Roll out DMARC enforcement gradually and review reports before applying quarantine or reject.