All data displayed is public and provided by the DNS system. Use of this website is subject to our Terms of Service.
Last checked about 9 hours ago
Your domain has strong email authentication. A few improvements can get you to a perfect score.
Upgrade DMARC policy to reject for stronger protection
DMARC improvement
42 / 50 points
DMARC record is valid and configured correctly.
v=DMARC1;p=quarantine;pct=100;rua=mailto:[email protected];ruf=mailto:[email protected]
Policy (p)
quarantine
DKIM Alignment (adkim)
Relaxed (default)
SPF Alignment (aspf)
Relaxed (default)
Verification successful
Verification successful
You can add our monitoring system alongside your existing setup. DMARC supports multiple mailto: addresses, giving you additional visibility and backup reporting.
20 / 20 points
BIMI Record Found and Looks Good
v=BIMI1; l=https://d2ku5z3nwcuq7g.cloudfront.net/amazon_com_services_llc_1202038606.svg; a=https://d2ku5z3nwcuq7g.cloudfront.net/amazon_com_services_llc_VMC.pem
https://d2ku5z3nwcuq7g.cloudfront.net/amazon_com_services_llc_1202038606.svg
image/svg+xml
Note: We do not parse SVG content for safety.
https://d2ku5z3nwcuq7g.cloudfront.net/amazon_com_services_llc_VMC.pem
Valid PEM detected
30 / 30 points
SPF record is valid.
v=spf1 include:amazon.com -all
Syntax Check
OK
DNS Lookup Count
5 / 10 max
Root-level mechanisms requiring DNS queries: 1.
Void Lookups
0 / 2 max
Fail: Reject emails from unauthorized servers (recommended for production)
Grouped by DNS record source (includes and sub-includes)
This record also contains:
SPF record found
primevideo.com
TXT Record
v=spf1 include:spf1.amazon.com include:spf2.amazon.com include:amazonses.com -all
Processed recursively per RFC 7208
SPF record found
amazon.com
TXT Record
v=spf1 ip4:207.171.160.0/19 ip4:87.238.80.0/21 ip4:72.21.192.0/19 ip4:194.154.193.192/27 ip4:194.7.41.152/28 ip4:212.123.28.40/32 ip4:203.81.17.0/24 ip4:178.236.10.128/26 ip4:52.94.124.0/28 ip4:99.78.197.208/28 ip4:52.119.213.144/28 -all
Processed recursively per RFC 7208
SPF record found
amazon.com
TXT Record
v=spf1 ip4:176.32.105.0/24 ip4:176.32.127.0/24 ip4:106.50.16.0/28 ip4:205.251.233.32/32 ip4:205.251.233.36/32 ip4:72.21.217.142/32 ip4:52.95.48.152/29 ip4:52.95.49.88/29 include:spf3.amazon.com -all
Processed recursively per RFC 7208
SPF record found
spf2.amazon.com
TXT Record
v=spf1 ip4:18.156.205.64 ip4:3.65.3.180 ip4:3.72.182.33 ip4:3.74.81.189 ip4:63.176.194.123 ip4:18.197.217.180 ip4:3.75.33.185 ip4:35.158.23.94 ip4:3.64.237.68 ip4:63.178.143.178 ip4:52.28.197.132 ip4:52.57.120.243 ip4:63.178.132.221 ip4:18.199.210.3 ip4:18.158.153.154 ip4:44.245.243.92 ip4:44.246.1.125 ip4:44.246.68.102 ip4:44.246.77.92 ip4:52.13.214.179 ip4:52.26.1.71 ip4:52.34.181.151 ip4:52.42.203.116 ip4:35.155.198.111 ip4:52.12.53.23 ip4:52.35.192.45 ip4:35.162.73.231 ip4:34.218.115.239 ip4:35.83.148.184 ip4:50.112.246.219 ip4:107.22.191.150 ip4:13.216.54.180 ip4:13.216.7.111 ip4:18.207.52.234 ip4:3.211.80.218 ip4:3.216.221.67 ip4:3.221.209.22 ip4:34.193.58.168 ip4:34.198.94.229 ip4:34.197.254.9 ip4:54.211.126.101 ip4:34.197.10.50 ip4:34.198.218.121 ip4:50.16.246.183 ip4:44.210.169.44 -all
Processed recursively per RFC 7208
SPF record found
amazon.com
TXT Record
v=spf1 ip4:199.255.192.0/22 ip4:199.127.232.0/22 ip4:54.240.0.0/18 ip4:69.169.224.0/20 ip4:23.249.208.0/20 ip4:23.251.224.0/19 ip4:76.223.176.0/20 ip4:54.240.64.0/18 ip4:76.223.128.0/19 ip4:216.221.160.0/19 ip4:206.55.144.0/20 ip4:24.110.64.0/18 -all
Processed recursively per RFC 7208
How primevideo.com configures email authentication
v=DMARC1;p=quarantine;pct=100;rua=mailto:[email protected];ruf=mailto:[email protected]
v=spf1 include:amazon.com -all
v=BIMI1; l=https://d2ku5z3nwcuq7g.cloudfront.net/amazon_com_services_llc_1202038606.svg; a=https://d2ku5z3nwcuq7g.cloudfront.net/amazon_com_services_llc_VMC.pem
Configuration changes will appear here when detected
Run a free email authentication check (DMARC, SPF, BIMI).
We will generate a shareable URL for your domain.
Try popular examples: google.com, amazon.com, booking.com
Discover how other organizations configure their email authentication
Frequently checked
Reject policy + valid SPF
Also using quarantine
Showing domains checked by our users. All data is from public DNS records.
We analyze your domain's email authentication: DMARC policy and alignment, SPF record and includes, and BIMI logo/CV when present.
Healthy authentication improves delivery and blocks spoofing. Major inbox providers increasingly require DMARC and robust SPF/DKIM practices for senders.
Don't rely on snapshots. Get the most accurate, real-time insights into your email delivery and reputation with DMARCTrust.