Email domain check

Check a domain for email: MX, SPF, DKIM, DMARC, blacklists

The report gathers everything mail services use to decide whether to accept mail from a domain: DNS records, mail server addresses and their reputation. Every item links to a detailed check.

A domain mail server under a magnifying glass: MX, records and blocklists

How mail services check a domain

The receiver looks at three things: whether the email is genuine (SPF, DKIM, DMARC), the reputation of the sending server (PTR, blacklists) and channel protection (MTA-STS, TLS-RPT). The report checks all of it through DNS.

BIMI shows the company logo next to the email in Gmail, Yahoo and Apple Mail. It only works with a DMARC policy of quarantine or reject.

When it helps

Company emails started landing in spam and you need the cause.
You are moving mail to another provider and comparing records.
Before a newsletter launch, so the domain meets Gmail and Yahoo rules.
When you check a partner's domain before a joint mailing.

Questions and answers

01Why check MX servers against blacklists?

The MX and the sending server are often the same machine. If its address is listed, receivers reject your mail. For an exact check of the sender, enter its IP on the RBL page.

02What is MTA-STS?

A policy that tells senders to deliver mail to your domain only over TLS with a valid certificate. The _mta-sts record announces the policy, and the file itself lives on mta-sts.yourdomain.

03DKIM was not found. Does that mean there is none?

Not necessarily. The mail service picks the selector, and it cannot always be guessed. Take the selector from the DKIM-Signature header of any email and check it on the DKIM page.

04What is BIMI?

A record that lets Gmail, Yahoo and Apple Mail show your logo next to the letter. It works only with DMARC at quarantine or reject, and Gmail also requires a certificate for the logo.

05How is this check different from header analysis?

This page checks the domain's DNS records. How a specific letter fared shows in its headers: paste them into the header analyzer to see the SPF, DKIM and DMARC result for that letter.