Free tool
Email & domain checker
Emails landing in spam, bouncing, or someone sending fake email in your name: the cause is almost always a missing or broken DNS record. Enter your domain and we’ll check the records that decide it, plus the SSL certificate and renewal date that can take your site down.
In plain words
SPF, DKIM and DMARC
Three DNS records that together prove an email really came from you. Each one covers a gap the others leave, which is why you need all three.
SPF
A list of the servers allowed to send email for your domain. Without it, receiving servers can’t tell your real email from a forgery.
DKIM
A digital signature on every message, checked against a public key in your DNS. It proves the email wasn’t changed on the way.
DMARC
Your instructions for email that fails SPF and DKIM: deliver it, send it to spam, or reject it. It also gets you reports on who is sending as you.
Questions
About email and DNS
Why do my emails go to spam?
Most often because the domain is missing SPF, DKIM or DMARC, or one of them is set up wrong. Gmail, Yahoo and Outlook check all three, and treat email without them as less trustworthy. Since 2024, Gmail and Yahoo require SPF or DKIM from every sender, and all three from bulk senders.
The checker says DKIM is missing, but I set it up. Why?
DKIM keys sit under a name called a selector, and there is no way to list them all. We try the names that Google, Microsoft, Zoho, GoDaddy, Hostinger, Resend and other common providers use. If yours uses a custom selector, check it in your email provider’s admin panel.
What does “No MX records” mean?
Nothing tells the internet where to deliver email for your domain, so messages to your address bounce. Add the MX records from your email provider, or set up free forwarding to an existing inbox with Cloudflare Email Routing or ImprovMX.
Should DMARC be set to reject?
Eventually. Start with p=none and a reporting address, read the reports for two to four weeks to make sure every real sender (your mailbox, website forms, invoicing tools) passes, then move to quarantine and finally reject. Going straight to reject can block your own email.
Is it safe to check my domain here?
Yes. Everything checked is already public: DNS records, the domain registry and your website’s certificate. We don’t send any email, need a login, or save the results.
Tell us what you’re building
Thirty minutes is usually enough to tell you what it will take, roughly how long, and whether we are the right people for it. If we are not, we will say so.