monday.com email security: SPF, DKIM & DMARC
Is monday.com spoofable? See monday.com's SPF, DKIM, DMARC and MTA-STS records and find out if this domain is protected against email spoofing.
Last updated: June 3, 2026
SPF
OKv=spf1 include:servers.mcsv.net include:_spf.google.com include:_spf.qemailserver.com include:_spf.salesforce.com include:mail.zendesk.com include:_spf.getresponse.com ip4:192.92.97.253 ip4:167.89.101.197 ip4:205.201.137.64 ip4:149.72.206.224 ip4:149.72.28.207 ip4:149.72.33.113 ip4:159.183.114.208 ip4:167.89.101.197 ip4:167.89.101.203 ip4:167.89.105.198 ip4:167.89.105.2 ip4:168.245.109.80 ip4:168.245.70.46 ip4:198.61.254.181 ip4:159.183.224.123 ip4:185.250.239.27 ip4:159.183.229.241 -allDKIM
OKSelectors: google, k1, mandrill, s1, s2, zendesk1, zendesk2DMARC
OKv=DMARC1; p=reject; rua=mailto:dmarc-reports@mailsec.monday.comMX
OKaspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com, alt3.aspmx.l.google.com, alt4.aspmx.l.google.comRecommendations
1Add MTA-STS to enforce TLS encryption for incoming emails
Without MTA-STS, an attacker performing a man-in-the-middle attack can downgrade the connection between mail servers to plaintext, intercepting emails in transit. MTA-STS tells sending servers to only deliver via TLS with a valid certificate, preventing downgrade attacks.
Run a live analysis
The results above are updated daily. For an instant check of monday.com, run a live analysis.
Analyze monday.com liveFrequently asked questions about monday.com
Is monday.com spoofable?
No. monday.com is protected against email spoofing with a robust configuration. Email security score: 90/100 (grade A).
Does monday.com have an SPF record?
Yes, monday.com publishes an SPF record (-all qualifier).
What is monday.com's DMARC record?
monday.com publishes a DMARC record (_dmarc.monday.com) with a p=reject policy.
Does monday.com use DKIM?
Yes, DKIM signatures were detected for monday.com.
Want to test another domain? Run a free email spoofing test.
Guides to understand these results
SPF Guide
Understand how SPF defines which servers are authorized to send emails for a domain.
DKIM Guide
Discover how DKIM cryptographically signs your emails to guarantee their authenticity.
DMARC Guide
Learn how DMARC orchestrates SPF and DKIM to protect your domain.
MTA-STS Guide
Learn how MTA-STS enforces TLS encryption to protect your emails in transit.
SPF vs DKIM vs DMARC
Compare the three protocols and understand how they work together.