All data displayed is public and provided by the DNS system. Use of this website is subject to our Terms of Service.
Last checked about 9 hours ago
Your domain has strong email authentication. A few improvements can get you to a perfect score.
Upgrade to -all (hard fail) for maximum protection
SPF improvement
50 / 50 points
DMARC record is valid and configured correctly.
v=DMARC1;p=reject;fo=1:d:s;pct=100;rua=mailto:[email protected],mailto:[email protected];ruf=mailto:[email protected]
Policy (p)
reject
DKIM Alignment (adkim)
Relaxed (default)
SPF Alignment (aspf)
Relaxed (default)
Verification successful
Verification successful
Verification successful
You can add our monitoring system alongside your existing setup. DMARC supports multiple mailto: addresses, giving you additional visibility and backup reporting.
15 / 20 points
BIMI Record Found and Looks Good
v=BIMI1; l=https://www.salesforce.com/content/dam/web/en_us/www/images/home/bimi-salesforce-logo.svg;
https://www.salesforce.com/content/dam/web/en_us/www/images/home/bimi-salesforce-logo.svg
image/svg+xml
Note: We do not parse SVG content for safety.
No certificate URL provided (a=). Optional when using self-asserted logos.
26 / 30 points
SPF record is valid.
v=spf1 include:_spf.google.com include:_spf.salesforce.com exists:%{i}._spf.corp.salesforce.com ~all
Syntax Check
OK
DNS Lookup Count
4 / 10 max
Root-level mechanisms requiring DNS queries: 3.
Void Lookups
2 / 2 max
Soft fail: Mark emails from unauthorized servers as suspicious but don't reject
Grouped by DNS record source (includes and sub-includes)
SPF record found
salesforce.com
TXT Record
v=spf1 ip4:74.125.0.0/16 ip4:209.85.128.0/17 ip6:2001:4860:4000::/36 ip6:2404:6800:4000::/36 ip6:2607:f8b0:4000::/36 ip6:2800:3f0:4000::/36 ip6:2a00:1450:4000::/36 ip6:2c0f:fb50:4000::/36 ~all
Processed recursively per RFC 7208
SPF record found
salesforce.com
TXT Record
v=spf1 exists:%{i}._spf.mta.salesforce.com -all
Processed recursively per RFC 7208
Domain does not exist
Domain does not exist
How salesforce.com configures email authentication
v=DMARC1;p=reject;fo=1:d:s;pct=100;rua=mailto:[email protected],mailto:[email protected];ruf=mailto:[email protected]
v=spf1 include:_spf.google.com include:_spf.salesforce.com exists:%{i}._spf.corp.salesforce.com ~all
v=BIMI1; l=https://www.salesforce.com/content/dam/web/en_us/www/images/home/bimi-salesforce-logo.svg;
Configuration changes will appear here when detected
Run a free email authentication check (DMARC, SPF, BIMI).
We will generate a shareable URL for your domain.
Try popular examples: google.com, amazon.com, booking.com
Discover how other organizations configure their email authentication
Frequently checked
Reject policy + valid SPF
Also using reject
Showing domains checked by our users. All data is from public DNS records.
We analyze your domain's email authentication: DMARC policy and alignment, SPF record and includes, and BIMI logo/CV when present.
Healthy authentication improves delivery and blocks spoofing. Major inbox providers increasingly require DMARC and robust SPF/DKIM practices for senders.
Don't rely on snapshots. Get the most accurate, real-time insights into your email delivery and reputation with DMARCTrust.