← Home

Is cloudflare.com's email set up correctly?

A live check of cloudflare.com's email authentication — SPF, DKIM, DMARC, and MX, the four signals mailbox providers use to decide whether cloudflare.com's email reaches the inbox.

4 of 4 checks passed

cloudflare.com has a strong email authentication setup.

✓ SPF configured (-all)

Receivers can reject or soft-fail spoofed mail.

v=spf1 ip4:199.15.212.0/22 ip4:173.245.48.0/20 include:_spf.google.com include:spf1.mcsv.net include:spf.mandrillapp.com include:mail.zendesk.com include:stspg-customer.com include:_spf.salesforce.com -all
✓ DKIM key found (selector: k1)

A signing key is published, so sent mail can be cryptographically verified.

✓ DMARC policy: p=reject

Mail failing authentication is quarantined or rejected.

v=DMARC1; p=reject; pct=100; rua=mailto:[email protected],mailto:[email protected]
✓ MX records published

mxa-canary.global.inbound.cf-emailsecurity.net, mxb-canary.global.inbound.cf-emailsecurity.net, mxa.global.inbound.cf-emailsecurity.net

Sending cold email from cloudflare.com?

Bulk Email Boxer warms your mailboxes, monitors SPF/DKIM/DMARC, stamps RFC 8058 one-click unsubscribe on every send, and verifies your lists — so your email lands. $40/mo flat, unlimited mailboxes, no per-seat fees.

Start free trial →

Fix what's missing: Complete deliverability guide · DKIM setup · Full deliverability tool

Checks public DNS records only. Data shown was current at build time; run the live tool for the latest.