Email deliverability
checker.
Check a domain's MX, SPF, DKIM, and DMARC records and get a setup score. Catch spoofing and delivery gaps. Free, no login.
No account required to use this tool.
More free domain tools
See a domain's registrar, registration and expiry dates, status, and nameservers, live from RDAP.
OpenCheck A, AAAA, CNAME, MX, TXT, NS, SOA, and CAA records for any domain in real time.
OpenCheck a domain's TLS certificate: issuer, validity, days to expiry, covered hostnames, and trust.
OpenFrequently asked questions
What does the email deliverability checker test?
Four things, read live from the domain's DNS: MX records (can it receive mail?), SPF (which servers may send for it), DMARC (the anti-spoofing policy), and a DKIM probe across common selectors. It combines them into a simple setup score.
What are SPF, DKIM, and DMARC?
They are the three records that protect a domain from email spoofing. SPF lists authorized sending servers, DKIM cryptographically signs messages, and DMARC tells receivers what to do when a message fails SPF or DKIM. Together they decide whether your mail lands in the inbox or the spam folder, and whether attackers can impersonate you.
Why is my DKIM shown as not found?
DKIM records live under a selector you choose (like 'google' or 'selector1'), and selectors cannot be listed from DNS. The tool probes the most common ones, but if you use a custom selector it will not be detected. That is a soft warning, not a failure.
My DMARC policy is 'none' — is that bad?
It means DMARC is in monitor-only mode: you get reports but receivers take no action on spoofed mail. It is a fine first step, but moving to 'quarantine' then 'reject' is what actually stops impersonation once you have confirmed legitimate senders pass.
How does this relate to my domains?
Every active domain that sends email needs these records, and they are easy to forget on the dozens of domains in a portfolio. Track your domains in Lemon Domains so you know which ones are live and worth hardening.
Stop letting domains slip through the cracks.
Five minutes to import. A lifetime of not refreshing five registrar tabs.