NextlyTools
Security Tools

Email Security Checker

Analyze SPF, DMARC, DKIM, MTA-STS and full anti-spoofing posture for any domain.

Try: gmail.com microsoft.com cloudflare.com
85 B
Strong posture
SPF
100
DMARC
100
DKIM
45
DNS Sec
100
cloudflare.com scored 85/100 (B). ✓ Strong protection against domain spoofing and BEC attacks. DKIM active on 2 selector(s). MTA-STS enforced.
SPF Authentication
100/100
A+
  • ✓ SPF record is properly configured
  • ✓ SPF uses -all — strong reject policy
v=spf1 ip4:199.15.212.0/22 ip4:173.245.48.0/20 include:_spf.google.com include:spf1.mcsv.net include...
DMARC Policy
100/100
A+
  • ✓ Policy p=reject — full spoofing protection active
  • ✓ Aggregate reports (rua) configured
p=reject pct=100% rua ✓
DKIM Signing
45/100
F
  • ✓ DKIM active with selector(s): k1, s1
  • ⚠ Selector k1: RSA 1024-bit key — upgrade to 2048-bit
  • ⚠ Selector s1: RSA 1024-bit key — upgrade to 2048-bit
k1 s1
MX & Mail Routing
80/100
B
  • ✓ 4 MX record(s) found
  • ℹ Priority 5: mxa-canary.global.inbound.cf-emailsecurity.net
  • ℹ Priority 5: mxb-canary.global.inbound.cf-emailsecurity.net
MTA-STS
60/100
Enabled
  • ⚠ MTA-STS enabled, mode: none
  • ⚠ Policy file not reachable
TLS-RPT
100/100
Configured
  • ✓ TLS-RPT configured — TLS failure reporting enabled
BIMI Brand
100/100
Configured
  • ✓ BIMI record found
  • ✓ SVG logo URL configured
DNS Security
100/100
A+
  • ✓ DNSSEC enabled — DNS tampering protection active
  • ✓ CAA records configured — certificate issuance restricted