Reads public DNS only — nothing is sent to your domain

Find out why your email lands in spam.

A full diagnostic of any domain's email authentication in a few seconds: SPF, DKIM, DMARC, MX, MTA-STS, DNSSEC and eighteen blocklists. You get a score, the exact records to fix what is broken, and a report you can hand to a client.

Free, no sign-up. Reads public DNS only — nothing is sent to your domain.

Scan any domain — you don't need to own it18 blocklists checked in one passCopy-paste DNS records, not vague adviceRegistrar-specific instructions — GoDaddy, Cloudflare, Route 53Before/after proof that your fix landedWhite-label reports under your own brandBulk prospecting — scan a list of leads at onceWeekly re-scans with break alertsPlain-English diagnosis for non-technical clientsNo account needed for a scan

For agencies and consultants

You can scan any domain here — including ones you don't own. That makes this a pitch tool as much as a fix tool.

Scan your prospects

Run a domain you don't own and lead with the finding. A score of 34 and an open spoofing hole is a better opener than a cold email.

Put your logo on it

Export the whole diagnosis under your own brand — company name, logo, colour, contact line — as a link or a PDF you can bill for.

Watch them after the fix

Keep client domains under weekly re-scan and get told the moment a record breaks, a policy weakens, or an IP hits a blocklist.

What gets checked

MX

Mail routing and failover

SPF

Authorized senders, lookup limit, hard fail

DKIM

50+ selectors probed, key strength

DMARC

Policy, enforcement level, reporting

Blocklists

18 major DNSBLs including Spamhaus

MTA-STS

Policy file fetched and parsed

TLS-RPT

Encrypted delivery reporting

BIMI + DNSSEC

Logo record and signed zone

How it works

Enter a domain

No sign-up, no verification email, nothing sent to your mail server. We read public DNS records the same way a receiving server does.

Get a score you can explain

Every check returns pass, warning or fail with its own weight, so the 0-100 number is auditable rather than a black box.

Copy the exact records

Each failing check comes with the host, type and value to paste into your DNS console, plus notes for the common registrars.

Fix, then re-check

Re-verify a single record without rerunning the whole scan, and share the permanent report link with a client or developer.

A report your client can actually read

One click turns the technical findings into plain language: where the domain stands, what it costs them, and what to fix first. Print it, or send the permanent report link.

Common questions about deliverability →