Skip to content
Start with 100 free verification credits
Qualisend
Free tool

Domain health check.

Check a domain's email setup in one shot - SPF, DKIM, DMARC, MX, BIMI, and MTA-STS, resolved against live DNS with a pass or fail on each and the actual record shown. No account, no card.

Enter a domain or email. We check its SPF, DKIM, DMARC, MX, BIMI, and MTA-STS records over live DNS - nothing is stored.

What a healthy domain looks like

The four core records work together: an SPF, DKIM, and DMARC setup proves your mail is really yours, and a valid MX record means the domain can receive replies and bounces. Missing or misconfigured authentication is one of the most common reasons mail lands in spam, and it's a hard requirement in the Google and Yahoo sender rules. The optional records go further: BIMI puts your logo in the inbox and MTA-STS enforces encrypted delivery.

Fix what fails

If a record comes back failing, build a correct one with the SPF record generator or the DMARC record generator, publish it at your DNS host, and re-run this check. To confirm a single record in isolation, the SPF/DKIM/DMARC checker lets you supply an exact DKIM selector, and the full tool suite covers the rest.

Then read your DMARC reports

Once your DMARC record is live at p=none or higher, mailbox providers start emailing you daily aggregate reports of every source sending as your domain. Drop one into the DMARC report analyzer to see who's authenticating, spot anyone spoofing you, and know when it's safe to move from monitoring toward enforcement.

Domain health check FAQ

It runs live DNS lookups for the six records that decide whether your mail authenticates and delivers: SPF, DKIM, DMARC, MX, BIMI, and MTA-STS. Each comes back as a pass, a warning, or a fail, with the record itself shown so you can see exactly what's published. SPF, DKIM, DMARC, and MX are the core checks; BIMI and MTA-STS are optional extras.

DKIM records live at a selector you choose (selector._domainkey.yourdomain.com), and there's no way to list a domain's selectors over DNS. This tool probes the common selectors big providers use, so it can confirm DKIM when one of those matches - but if you use a custom selector it can't find, it returns a warning rather than a fail. Check your exact selector in your email provider's settings.

Build the record with the free generators - the SPF record generator assembles a valid v=spf1 record from your sending sources, and the DMARC record generator builds the _dmarc policy. Publish it as a TXT record at your DNS host (we have step-by-step guides for Cloudflare, GoDaddy, Namecheap, and more), then run this check again to confirm.

No - it means your authentication and DNS are set up correctly, which is the foundation. Inbox placement still depends on sender reputation, engagement, complaint rates, and list quality. Authentication is the price of admission; a clean list and good reputation are what earn the inbox.

Authentication done - now clean the list

A healthy domain still needs a clean list to reach the inbox. Verify and clean yours - start free with 100 credits, no card required.

Start verifying