Mail routing
See whether the domain has active mail servers and which provider appears to handle them.
Your domain, explained in plain English.
Check the records behind your website and email. Find missing protection, understand what is wrong, and get a practical next step.
DNS lookupMX recordsSPF analysisDMARC policy
Run a domain health check
Enter a root domain. We query public DNS records only.
Do not enter a URL path, email address, password, or private
hostname.
What we inspect
✓ Website address✓ Mail exchange✓ SPF policy✓ DMARC policy✓ SPF lookup risk✓ Policy strength
Ready to diagnose
Your report will appear here.
0
Domain health
Checking public records…
One report instead of six tabs.
Live technical checks paired with guidance that a small business can actually use.
Sender authorization
Find the SPF policy, includes, lookup pressure, and common configuration mistakes.
DMARC protection
Understand whether spoofed mail is monitored, quarantined, or rejected.
Read a domain-health report in the right order.
Start with basic routing, then inspect authentication. MX records show where inbound mail should go. SPF lists permitted outbound infrastructure. DMARC tells receiving systems how to evaluate aligned SPF or DKIM results and what handling policy the domain requests.
Do not copy a DNS record blindly
Your mail provider’s setup instructions are the authoritative source for hostnames and values. A copied SPF include or DMARC example may be wrong for your providers, reporting addresses or enforcement stage.
Safer rolloutInventory every legitimate sender, publish the provider-authorized SPF and DKIM configuration, begin DMARC monitoring, examine reports, then increase policy enforcement only after legitimate mail aligns.
Why a correct change may still look missing
DNS responses are cached. The time-to-live value and resolver behavior influence how quickly a change becomes visible. Check the authoritative provider, wait through the relevant cache window and test again before making repeated changes.
Read the complete MX, SPF and DMARC guide →
Last updated 6 September 2026. Results are diagnostic observations from public DNS, not a guarantee of delivery or security.
Common questions
Email DNS FAQ
Does an MX record prove email works?
No. It shows published routing information. Mailboxes, server availability, filtering, account configuration and other conditions also affect delivery.
Can a domain have more than one SPF record?
A domain should publish a single applicable SPF policy. Multiple SPF TXT policies can produce a permanent error; consolidate legitimate mechanisms carefully.
Does DMARC replace SPF and DKIM?
No. DMARC evaluates alignment using SPF and/or DKIM authentication results. A dependable setup normally configures the underlying authentication first.
Why does the tool use a public lookup service?
Browsers cannot query DNS records directly in the same way as a DNS client, so the checker requests public DNS answers from a resolver service. Enter only public domain names.
Is a high score a security guarantee?
No. The score summarizes a limited set of visible DNS checks. It cannot assess account security, DKIM signing for every sender, message content or recipient filtering.