Back to all tools
The DNS audit Any domain · SPF · DKIM · DMARC · MX · Graded A-F

DNS Checker

Run before every campaign. SPF, DKIM, DMARC, and MX checked together with weighted scoring. Catches the boring stuff: missing DMARC enforcement, soft-fail SPF policies, DKIM rotation gaps. Everything in one verdict.

e$
domain only, strips email and protocol automatically
+What we check

Four records. One grade.

/ 01. MX records
Mail servers
Which servers receive mail for the domain. We list all MX records ranked by priority. No MX = domain can't receive email.
/ 02. SPF
Sender policy
Which IPs are authorised to send. We grade strict (-all) vs soft-fail (~all) and decode the include chain into plain English.
/ 03. DMARC
Auth policy
What receivers should do with failed messages. We check policy strength: none (monitor only) vs quarantine vs reject.
/ 04. DKIM
Signing keys
Cryptographic signature on outgoing mail. We probe common selectors (google, default, selector1, k1, mail) and report what's published.
+Run before every campaign

Catch DNS issues before
your inbox rate does.

Most deliverability problems start with mis-configured DNS. Run a quick check before every send and you'll spot them before your subscribers do.

Continue learning
SPF PermError: Too Many DNS LookupsThe ten-lookup ceiling and how to get under it.Read guide → HubSpot SPF, DKIM & DMARC SetupEvery record HubSpot needs, and where it goes.Read guide → MTA-STS SetupFor Google Workspace and Microsoft 365.Read guide → What Is Email DeliverabilityThe plain-English version.Read guide →