Check a domain's DMARC and SPF
Type the domain: Veezco asks DNS for the DMARC and SPF records and tells you whether they exist, which policy they set and what it means for the business's email.
DMARC: missing
The domain has no DMARC record: fake emails using its name are not stopped, and Gmail has required it for bulk senders since 2024.
SPF: found
The domain declares which servers may send its email: v=spf1 include:_spf.provider.example ~all
Businesses in your area with this problem, with contacts: on Veezco type “estate agents in Bristol without DMARC”
Start freeWhat it checks
DMARC
The domain's _dmarc record and its policy: none only monitors, quarantine sends fake emails to spam, reject refuses them.
SPF
The v=spf1 record that says which servers may send email for the domain.
Only real answers
“Missing” is only said when the domain's servers answer: a DNS that doesn't answer is “not read”, not a missing record.
Three answers, never a guess
A check from outside sees the HTML the site sends, not what scripts add later. That is why there are three answers.
- Found
We read it, and it is there. With proof: the ID, the record, the piece of code.
- Not found
We read it, and it is not there. We only say so when the page could have contained it.
- Not read
It couldn't be read, and we tell you why: Tag Manager, a timeout, a robots.txt. It's not a no.
Why it matters
Without DMARC anyone can send email in a business's name, and its real emails risk spam: since 2024 Gmail and Yahoo require it from bulk senders.
It takes half an hour to fix, and it's a great reason for a call: the owner doesn't know about the problem until you show it.
Frequently asked questions
How do I check a domain's DMARC?
Type the domain above: the check asks DNS for the _dmarc record and tells you whether it exists, with its policy (none, quarantine or reject). The same check also reads SPF.
What's the difference between DMARC and SPF?
SPF says which servers may send email for the domain; DMARC says what to do with emails that fail the checks: monitor them, send them to spam or reject them.
The policy is “none”: is that OK?
It is the first step: you get reports, but fake emails get through. After a few weeks of reports you move to quarantine, then reject.
Do you check DKIM too?
No: the DKIM record has a different name for each service that sends email (the “selector”), and without it you can't ask DNS. We'd rather say so than guess.
Do you store the sites I check?
No. The result stays in memory for ten minutes, so the same site isn't read twice if you check it again, then it's gone. To stop abuse we count how many checks come from each IP address, without storing the address.
One check, five answers
- Meta Pixel CheckerIs the Facebook and Instagram pixel there? With its ID.
- Google Analytics & Tag Manager CheckerAnalytics 4, Tag Manager and Google Ads, with their IDs.
- Website Technology CheckerWordPress, Shopify, Wix, plugins, chat and bookings.
- SSL Certificate CheckerValid or not, who issued it, when it expires.
Find the businesses with this problem
Veezco finds the businesses in your area, checks each website and gives you the contacts and the reason to call. 25 free leads every month, no card.