Bulk email SPF and DMARC checker: which addresses are at domains with no SPF or DMARC?
In short: Paste email addresses and see, row by row, whether the domain after the @ publishes an SPF record, a DMARC record, both or neither, with the DMARC policy in the CSV. Limit: Reads the domain, never the mailbox: published records say nothing about whether a person's address exists.
A bulk email SPF and DMARC checker reads the domain after the @ in each address and looks up its SPF and DMARC records. Paste up to 100 unique domains a run, or 500 after a free Google sign-in, and every address gets a row: both published, one missing, neither, or a record that needs a fix. It checks the domain, not the mailbox. Download the CSV.
Price: this tool is free. Checking a whole email list is from $9/mo, and the first 100 checks are free with Google, no card. Check your list free nowSee pricing
Sample result
tom@globex.example is at a domain with SPF but no DMARC record.
- Address
- tom@globex.example
- Domain
- globex.example
- SPF
- Published, ends in ~all
What this means for you
Both are sending records. A domain can take mail with neither, so this is a prompt to look, not a bounce prediction.
- SPF and DMARC read per domain
- DMARC policy in the CSV
- Invalid records say why
- CSV out, nothing emailed
- SPF
- DMARC
- DNS
By SimpleVerifier Team · Last updated
Also in: Português (Brasil) · Español · Deutsch · Français
Got a list where some domains look unmanaged?
- Paste it above to see which addresses are at domains with no SPF or DMARC, with a CSV of every row.
- Upload or paste it at /verify. Every address gets a live mailbox check, and the first 100 email checks are free with a Google sign-in, no card.
How do I check SPF and DMARC for the domains on an email list?
- Paste email addresses, one per line, or upload a CSV. Addresses are found anywhere in the text, so a whole export works.
- Press Check SPF and DMARC. Only the unique domains are sent, never the mailbox names, 10 a request. DNS only; no mail is sent.
- Read each row: SPF and DMARC published, No SPF record, No DMARC record, No SPF or DMARC, or A record needs a fix.
- Filter to the domains missing a record, download the CSV with the DMARC policy, and hand the rest to the mailbox check.
Example
- You enter
- Four addresses:
jane@acme.example(SPF and DMARC published),tom@globex.example(SPF only),ana@initech.example(neither) andbo@umbrella.example(two SPF records). - You get
- jane: SPF and DMARC published, with the policy in the CSV. tom: No DMARC record. ana: No SPF or DMARC. bo: A record needs a fix, with the reason. Download the CSV.
- Limits
- Up to 100 unique domains a run without an account and 500 when signed in with Google. 10 domains a request; DNS only, nothing is emailed.
What do SPF and DMARC at a recipient's domain tell you?
SPF (RFC 7208) lists the servers allowed to send mail for a domain, and DMARC (RFC 7489) tells receivers what to do when a message fails SPF or DKIM. Both are published in DNS by the domain's owner, so a lookup needs no contact with anyone.
On a list of addresses they are a hint about how managed each domain is. A company that sends its own mail normally publishes both. A domain with neither often sends little or no mail, and sometimes belongs to a business that never set up its mail properly.
What do the rows mean?
SPF and DMARC published means both records were found and read. No SPF record, No DMARC record and No SPF or DMARC say which is missing. A record needs a fix covers a record that is there but invalid, such as two SPF records or an SPF record that ends in +all. The CSV adds the DMARC policy (none, quarantine or reject) when one is published.
To check the domains on their own, without the addresses, use the bulk email authentication checker, which also reads DKIM and MX.
Why is a missing record not the same as a dead address?
A domain can receive mail perfectly well without publishing SPF or DMARC, because those records are about sending. Many small domains publish neither and still have working mailboxes. Treat the flag as a prompt to look, not a reason to delete a row.
For addresses at domains that cannot receive mail at all, use the bulk email domain MX checker, then check the rest with the mailbox check.
Who uses this tool, and for what?
- Marketers
- Spot unmanaged domains on a list before an import.
- Sales teams
- Segment a prospect list by whether each company manages its mail records.
- Agencies
- Add an SPF and DMARC column to a client list audit and export it as CSV.
- Developers
- Triage a signup export for domains that publish no mail records.
What can’t this tool tell you?
- Reads the domain, never the mailbox: published records say nothing about whether a person's address exists.
- SPF and DMARC only; DKIM is not checked because it needs a selector.
- A domain that only receives mail can lack both records, so a missing record is a prompt to look, not proof.
- Up to 100 unique domains a run without an account, 500 signed in. A DNS timeout shows as DNS didn't answer; run the list again.
Common questions
- How do I check SPF and DMARC for an email list?
- Paste the addresses into a bulk email SPF and DMARC checker like this one. It reads the domain after each @, looks up the SPF and DMARC records and shows which domains have each.
- Is this bulk email SPF and DMARC checker free?
- Yes. It is a free tool: up to 100 unique domains a run with no account, and up to 500 a run when you sign in with Google, with no card.
- Does it tell me whether the mailbox exists?
- No. It checks the domain, not the mailbox. A domain with both records can still hold a closed mailbox.
- Does a domain with no DMARC record bounce my mail?
- Not by itself. SPF and DMARC are sending records. A domain can take mail with neither.
- Does it check DKIM?
- No. DKIM needs a selector, which a list of addresses doesn't give. The bulk email authentication checker tries common selectors for domains.
- Does it send an email to the domain?
- No. It reads DNS only and never connects to a mail server.
Sources
A tidy list can still be full of dead addresses.
Extracting, deduplicating and syntax checks all work on the text of an address. None of them can tell whether the mailbox exists. Only the server that hosts it can answer that, through an SMTP check, and that is what the paid product does.
- Upload the cleaned file as it is: CSVs up to 100,000 rows
- A real SMTP mailbox check on every row, with catch-all detection
- Small list? Starter at $9/mo covers 2,500 emails a month, cancel anytime
Plans from $9 a month, cancel anytime, no contract. Sign in with Google and your first 100 email checks are free, no card. The free tools stay free either way.