SharkDNS Live Query
Mail Security
Validate SPF, DKIM, DMARC, MTA-STS, TLS-RPT, and BIMI for a domain.
No check yet
Enter a domain to verify SPF, DKIM, DMARC, and related mail records.
How This Query Works
Mail security checks read the DNS policies that receivers use to verify your senders.
SPF is expanded recursively, including nested includes, with the RFC 7208 limit of 10 DNS lookups enforced.
DMARC tags are parsed into policy, subdomain policy, coverage, and reporting addresses.
DKIM requires a selector; without one, common selectors are probed and the first match is shown.
SPFDKIMDMARCMTA-STSBIMI
Related Guides
Short articles explaining when and why to use this query.
SPF, DKIM, and DMARC checker guide
5 min readVerify the DNS policies that protect a domain from spoofing and improve mail delivery.
What is DNS lookup used for?
4 min readUse DNS lookup to inspect records, verify routing, troubleshoot mail, and compare public DNS visibility.
Reverse IP lookup explained
3 min readFind domains observed on the same IPv4 address and understand shared hosting or infrastructure relationships.