Run a test

Domain scanner: check your email setup

Enter a domain or email address to check SPF, DKIM, DMARC, BIMI, mail servers and blocklists in one go. No test email needed.

Enter a domain name or an email address, then run the check. Results appear after the form and are announced when they finish.

Checks public DNS records only. Nothing is sent to the domain.

How it works

Your whole email setup, checked in seconds

One scan reads every DNS record that decides whether your email is trusted, and tells you what to fix first.

Enter a domain or address

Type a domain such as example.com, or any email address at that domain.

We read its DNS records

The scanner checks SPF, DKIM, DMARC, BIMI and MX records, and looks the domain and its mail servers up on spam blocklists.

Fix what is marked

Each check shows the record found, whether it passes, and the exact change to make when it does not.

What we check

Six checks receiving servers make

Each is shown in your report with the record that was found.

SPF

Which servers may send email for your domain, and whether the record stays within 10 DNS lookups.

DKIM

The public keys that verify the signature on your emails, at over 30 common selector names.

DMARC

What receivers should do with email that fails SPF and DKIM, and where reports are sent.

BIMI

The record that shows your logo in supporting inboxes, with the SVG file and certificate.

Mail servers

The MX records that receive email for the domain, and whether each one resolves.

Blocklists

Whether the domain or its mail servers are on Spamhaus, SURBL, URIBL and other blocklists.

Where to start

Fix these in this order

Most delivery problems come from the first three records. BIMI comes last.

Scan a domain

01

SPF first

Make sure exactly one SPF record lists every service that sends email for you, and ends with ~all or -all.

02

Then DKIM

Turn on DKIM signing with each email service and publish the keys they give you.

03

Then DMARC

Start with p=none and a report address, read the reports, then move to quarantine and reject.

More email tools

Check the rest of your email setup

SPF checker

Check your SPF record, its includes and the 10-lookup limit.

DKIM checker

Find your DKIM keys and check their length and format.

DMARC checker

See your DMARC policy, report addresses and next step.

BIMI checker

Check your logo record, SVG file and certificate.

Mail tester

Send one email and get a spam score out of 10.

Questions

Domain scanner, explained

Something else? Get in touch and we’ll answer.

The domain scanner reads your DNS records, so it works without sending anything. The mail tester checks a real email you send, so it can also verify the DKIM signature, the sending server and the content. Use both for a complete picture.

DKIM keys are stored under a name called a selector, and every email provider uses different selector names. The scanner tries the common ones. If yours is different, find the s= value in the DKIM-Signature header of an email you sent and enter it in the DKIM checker.

For reliable delivery you need SPF, DKIM and DMARC. Gmail, Yahoo and Microsoft expect all three from bulk senders. MX records are needed to receive email. BIMI is optional.

No. The scan only reads public DNS records, the same ones any mail server reads when it receives your email.

Try it

Is your domain ready to send email?

Scan your domain and get a clear list of what to fix.

Scan your domain

More tools: Website checker · DNS checker · SPF checker · DKIM checker · DMARC checker · BIMI checker · Mail tester