Domain health check.
Check a domain's email setup in one shot — SPF, DKIM, DMARC, MX, BIMI, and MTA-STS, resolved against live DNS with a pass or fail on each and the actual record shown. No account, no card.
Enter a domain or email. We check its SPF, DKIM, DMARC, MX, BIMI, and MTA-STS records over live DNS — nothing is stored.
What a healthy domain looks like
The four core records work together: an SPF, DKIM, and DMARC setup proves your mail is really yours, and a valid MX record means the domain can receive replies and bounces. Missing or misconfigured authentication is one of the most common reasons mail lands in spam, and it's a hard requirement in the Google and Yahoo sender rules. The optional records go further: BIMI puts your logo in the inbox and MTA-STS enforces encrypted delivery.
Fix what fails
If a record comes back failing, build a correct one with the SPF record generator or the DMARC record generator, publish it at your DNS host, and re-run this check. To confirm a single record in isolation, the SPF/DKIM/DMARC checker lets you supply an exact DKIM selector, and the full tool suite covers the rest.
Then read your DMARC reports
Once your DMARC record is live at p=none or higher, mailbox providers start emailing you daily aggregate reports of every source sending as your domain. Drop one into the DMARC report analyzer to see who's authenticating, spot anyone spoofing you, and know when it's safe to move from monitoring toward enforcement.
Domain health check — FAQ
Authentication done — now clean the list
A healthy domain still needs a clean list to reach the inbox. Verify and clean yours — start free with 100 credits, no card required.