Question 1

What is a good SPF, DKIM, and DMARC setup?

Accepted Answer

SPF ending in -all, DKIM signing turned on with your mail provider, and DMARC set to p=reject with a rua= reporting address. Anything less leaves a gap spoofers or spam filters can exploit.

Question 2

Why is my email going to spam even with SPF set up?

Accepted Answer

SPF alone is not enough. Mailbox providers increasingly require DKIM signing and a DMARC policy too -- Google and Yahoo made this a hard requirement for bulk senders in 2024. A domain with only SPF is graded down on this checker for exactly that reason.

Question 3

Can this tool see my DKIM selector?

Accepted Answer

DKIM has no fixed record name, unlike SPF and DMARC -- the selector is chosen by whichever platform sends your mail and normally only appears in a message header. This tool probes the selectors real providers actually publish (Google Workspace, Microsoft 365, and common sending platforms), so a domain can look like it has no DKIM here while actually signing under a selector we didn't guess.

Is your email going to spam?