What is SPF?
SPF (Sender Policy Framework) is a DNS TXT record that lists which mail servers are allowed to send email on behalf of a domain. When a receiving server gets a message, it looks up the sender's SPF record and compares the sending IP against that list. If it does not match, the receiver applies whatever fallback the record specifies — usually soft-fail (mark as spam) or hard-fail (reject outright).
What is DMARC?
DMARC (Domain-based Message Authentication, Reporting and Conformance) sits on top of SPF and DKIM and closes the last gap: it tells receivers what to do when a message fails authentication, and where to send reports about failures. A well-configured DMARC record with p=reject is the single most effective way to stop your domain from being used in phishing attacks.
How to use this tool
Enter any domain above. DNSFetch pulls the current TXT record for the base domain (for SPF) and the _dmarc subdomain (for DMARC), extracts the relevant policy string, and summarizes what it means in plain English. Use it to audit your own domains or to check whether a domain you receive mail from is publishing a sensible email authentication policy.