WEEK 1 · FREE ONE-SHOT
Check your domain's SPF · DKIM · DMARC · MX
Enter a domain. We only read public DNS, score SPF, DKIM, DMARC, and MX from 0 to 100, and spell out common fixes. We do not log into your registrar or send any mail.
spf30 pts
Who may send for this domain. +all is an open door, -all is a closed one, ~all is just a raised eyebrow.
Who may send
dkim25 pts
Whether common selectors publish a public key. We probe 19 names; a miss does not prove you have no signatures.
Signature key
dmarc30 pts
What receivers should do when authentication fails. No record, or stuck at p=none, still lets spoofed mail through.
Failure policy
mx15 pts
Where bounces and reports can land. MX does not prove you can send, but without it failure notices often vanish.
Where bounces go
How scoring works
Four categories add up to 100. Hard failures sink that category (missing SPF, multiple SPF, missing DMARC). Softfail and p=none cost points without pretending you cannot send at all.
- A90–100
- B75–89
- C60–74
- D40–59
- F0–39
Missing common DKIM selectors scores 8 with status Unknown, not Fail. SPF includes are not expanded, so nested lookups past 10 may not show up in this check.