prefixkit RU

DNS, SSL & email

SPF and DMARC generator

Build SPF and DMARC for your domain: Google Workspace, Microsoft 365, Amazon SES, SendGrid and your own servers, with the SPF lookup count and DMARC policy guidance.

SPF

Who may send mail for the domain.

DMARC

What to do with mail failing SPF and DKIM, and where to send reports.

Check the records once published

The order to set things up

  1. SPF: list every service sending mail as your domain: mailbox provider, CRM, newsletters, the website.
  2. DKIM: turn on signing in each of those services; each service gives you its own DKIM record.
  3. DMARC: start with p=none and a report address, move to quarantine after 2–4 weeks, then to reject.

Mail still lands in spam? Check the sending IP in the blacklist check.

More tools: dns, ssl & email

DNS lookupAll records plus SPF, DKIM, DMARC and DNSSEC.DNS propagationIs a new record visible in 20 countries yet.WHOISRegistrar, dates and status of a domain or IP.SSL certificate check newExpiry, issuer, names, HTTPS redirect and HSTS.CSR generator newCSR and private key in the browser, RSA or ECDSA.Blacklist checkAn IP or domain against 29 spam lists, plus PTR.HTTP security headers newHSTS, CSP, cookies, redirects and a grade.Email header analyzer newDelivery path, delays, SPF, DKIM, DMARC, spam.DMARC report analyzer newWho sends as your domain; when to set p=reject.