One click validates everything email needs from your DNS: domain existence, MX routing, SPF, DKIM, and DMARC. Each protocol gets an honest, evidence-backed verdict — and a deep link to the dedicated checker when you want more detail.
One check covers domain existence, MX routing, SPF, DKIM, and DMARC — each with its own evidence and a link to the dedicated checker.
We query public DNS (NS, A, MX, and TXT records) for the domain you enter. The domain and results are used only to answer your request and are not stored.
The validator checks that the domain is delegated in DNS (NS, with an A-record fallback) and that MX records exist so mail can actually be routed to it. A missing domain or missing MX is a hard failure regardless of authentication records.
The same server-side checkers that power the SPF, DKIM, and DMARC tools analyze the records — recursive include walk, DKIM key inspection, and the RFC 9989 policy tree walk included. No parser is reimplemented and no internal HTTP calls are made.
Supply a selector for a definitive answer, or scan the common provider selectors. A scan that finds nothing is reported as unknown with guidance for finding your selector — never as a failure, because the selector may simply be uncommon.
Summary counts, one evidence card per protocol, and recommendations ordered by severity. Timeouts and DNS failures stay unknown instead of counting as passes, and every card links to the dedicated tool for a deeper look.
Deep-dive into the SPF record: mechanism table, include tree, and the RFC 7208 10-lookup limit.
Open toolSee the full DMARC tag table, report destinations, and external authorization status.
Open toolBrowse every record type — A, AAAA, MX, TXT, NS, CNAME, CAA, SOA, and SRV — for a domain.
Open toolA transparent weighted score across authentication, blacklist, BIMI, and MTA-STS signals.
Open toolA comprehensive email-domain security audit with a prioritized remediation plan.
Open toolIt runs five checks against public DNS: whether the domain exists and is delegated (NS), whether it can receive mail (MX), and whether SPF, DKIM, and DMARC records are published and valid. Each protocol gets its own independent verdict — pass, warning, fail, or unknown — with the DNS evidence behind it and a link to the dedicated checker for that protocol.
DKIM keys live at provider-specific selector names like google._domainkey or selector1._domainkey. If you scan the common selectors and none answers, the result is unknown — not a failure — because your provider may use a custom selector. Find the selector in the s= tag of a DKIM-Signature header on an email you sent, then run the check with that selector for a definitive answer. Only a selector you explicitly supplied that definitively has no record counts as failed.
A DNS timeout, SERVFAIL, or refused answer means the check could not complete — it says nothing about whether the record exists. Unknown results are never counted as passing or failing; they are shown as unknown and you can retry. This matters because treating a timeout as “clean” would hide real misconfiguration.
No. This tool reads DNS configuration only. Correct MX, SPF, DKIM, and DMARC records are necessary hygiene, but inbox placement also depends on sender reputation, engagement, content, and whether your provider actually signs and sends mail with these records. Think of the result as a configuration health check, not a deliverability prediction.
At most 43: NS (plus one A fallback), MX, up to 20 for the recursive SPF walk, up to 3 for the DMARC policy tree walk, up to 5 for DMARC external-report authorization, and either 1 for a supplied DKIM selector or up to 12 for the common-selector scan. Each query has a 4-second timeout, the checks run concurrently, and nothing is stored after the response is sent.
The validation reuses the same server-side engines as the SPF Record Checker, DKIM Record Checker, DMARC Record Checker, and DNS Record Checker — it calls their library functions directly rather than re-checking over HTTP, so the evidence in each card matches what the dedicated tool would show.
Automate Sales Outreach & Get Booked!
Start Free Trial(14 Day Free Trial, No CC Required)