Free tool · 🛡️ DNS, email & security check
Will your emailland in spam?
Gmail and Yahoo now reject bulk mail without SPF, DKIM and DMARC. This check reads your DNS, probes DKIM selectors, parses the DMARC policy, and audits the security headers on your website — then tells you exactly what to add.
Reads public DNS and response headers only. Nothing is sent to your mail server.
What it checks
Everything we would look at first on a client call.
Free, no sign-up, no email gate. If the report shows red, the fix is written next to it — and we are one click away if you would rather we did it.
- Nameservers, A/AAAA records, www record, mail servers and the provider behind them
- SPFrecord, DNS-lookup count (10 max), -all / ~all policy, duplicate records
- DKIMprobes 45 common selectors (Google, Microsoft 365, Zoho, Hostinger, Titan, SendGrid, Mailchimp…)
- DMARCpolicy, percentage, reporting address; MTA-STS; CAA
- Website headersHSTS, CSP, X-Content-Type-Options, X-Frame-Options, Referrer-Policy, Permissions-Policy, server banners
FAQ
Common questions
My SPF has more than 10 lookups. What happens?
Receivers return a permanent error and treat your mail as unauthenticated. Replace nested includes with the provider’s flattened IP list or remove senders you no longer use.
What DMARC policy should I use?
Start with p=none plus a rua= reporting address, read reports for two weeks, fix any legitimate sender that fails, then move to p=quarantine and finally p=reject.
DKIM shows “not found” but my provider says it is on.
We probe common selector names. If your provider uses a custom selector (e.g. mycompany2024._domainkey) it will not appear here but may still be valid — check the selector name in your provider’s dashboard.