Enter a domain and we'll check its MX, SPF and DMARC records from public DNS and flag common misconfigurations.
Check a domain's public MX, SPF and DMARC records in one go, and see whether its email is set up to reach inboxes and resist spoofing.
01
MX records
Which mail servers receive email for the domain.
02
SPF
Whether senders are authorised and the record is valid.
03
DMARC
Whether a policy exists and how strict it is.
04
Plain-English summary
What each finding means and what to do about it.
- 1
Enter a domain
Your own, or one you're checking for a client.
- 2
Read the records
We look up the public DNS records live.
- 3
Fix the gaps
Add missing records or strengthen weak policies with your DNS provider.
Fully authenticated
MX set, a valid SPF record and a DMARC policy, ideally moving towards quarantine or reject.
DMARC set to none
Monitoring only. A good first step, but it doesn't stop spoofing yet.
Missing SPF or DMARC
Your emails are more likely to hit spam, and your domain is easier to impersonate.
Major mailbox providers now expect proper authentication from senders. Missing or broken records mean quotes, invoices and newsletters can silently land in spam, and leave your domain open to phishing in your name.
About the DNS & email health checker.
A DNS policy telling receivers what to do with email that fails SPF and DKIM checks, and where to send reports.