webflow.com email security: SPF, DKIM & DMARC

Is webflow.com spoofable? See webflow.com's SPF, DKIM, DMARC and MTA-STS records and find out if this domain is protected against email spoofing.

Last updated: June 3, 2026

70B

This domain is protected against spoofing

Warning

v=spf1 include:_spf.google.com include:spf.mailjet.com include:mail.zendesk.com include:_spf.salesforce.com ?all

Selectors: google, mandrill, s1, s2

v=DMARC1; p=reject; sp=none; rua=mailto:dmarc-reports@webflow.com,mailto:re+9a4f4489f1fa@inbound.dmarcdigests.com; aspf=r; pct=100

aspmx.l.google.com, alt2.aspmx.l.google.com, alt1.aspmx.l.google.com, aspmx2.googlemail.com, aspmx3.googlemail.com

Missing

No record found

1Add MTA-STS to enforce TLS encryption for incoming emails
Without MTA-STS, an attacker performing a man-in-the-middle attack can downgrade the connection between mail servers to plaintext, intercepting emails in transit. MTA-STS tells sending servers to only deliver via TLS with a valid certificate, preventing downgrade attacks.

Run a live analysis

The results above are updated daily. For an instant check of webflow.com, run a live analysis.

No. webflow.com is protected against email spoofing with a robust configuration. Email security score: 70/100 (grade B).

Yes, webflow.com publishes an SPF record (?all qualifier).

webflow.com publishes a DMARC record (_dmarc.webflow.com) with a p=reject policy.

Yes, DKIM signatures were detected for webflow.com.

Want to test another domain? Run a free email spoofing test.

Understand how SPF defines which servers are authorized to send emails for a domain.

Discover how DKIM cryptographically signs your emails to guarantee their authenticity.

Learn how DMARC orchestrates SPF and DKIM to protect your domain.

Learn how MTA-STS enforces TLS encryption to protect your emails in transit.

Compare the three protocols and understand how they work together.