Domain checker
Is your domain set up to be trusted?
One report covers everything that decides whether your mail is delivered or spoofed: MX, SPF, DKIM, DMARC, MTA-STS, TLS-RPT, DNSSEC and BIMI. Every problem comes with the fix and the reason it matters.
One record at a time
Focused checks
SPF check
Which servers may send as your domain.
DKIM check
The signature that proves your mail is genuine.
DMARC check
Your anti-spoofing policy and reporting.
MX lookup
The mail servers that receive your email.
MTA-STS check
Enforced TLS delivery to your servers.
TLS-RPT check
Reports about TLS delivery problems.
DNSSEC check
Signed DNS that can't be tampered with.
BIMI check
Your brand logo in the inbox.
Questions
Frequently asked questions
What does a domain email check verify?
It inspects the DNS records that control your email: MX, SPF, DKIM and DMARC, plus MTA-STS, TLS-RPT, DNSSEC and BIMI. It reports what is missing or misconfigured and how to fix it.
Why do SPF, DKIM and DMARC matter?
Together they let mailbox providers verify that a message really came from your domain and was not altered. Without them your mail is easier to spoof and more likely to land in spam, and Gmail and Yahoo now require them for bulk senders.
Small print
About these results
This tool reads your domain's public DNS records (and the MTA-STS policy file) at the moment of the check and shows what it finds, with general best-practice guidance. Results reflect current public data and can be affected by DNS caching and propagation (changes may take up to 24-48 hours to appear). DKIM is checked against common selectors and any selector you provide: a "not found" result does not always mean DKIM is missing. Recommendations are general guidance, do not guarantee deliverability, and are not a substitute for your email provider's official setup instructions. We don't store the domains you check or send anything on your behalf.