Free tool
Is your domain set up to reach the inbox?
Enter the domain you send email from. We check its public DNS records for SPF, DMARC, DKIM and mail routing in a few seconds, in your browser, and tell you what's missing. Nothing is stored.
Your sending domain
Your email platform shows the selector in its domain-authentication settings. HubSpot uses hs1/hs2 with your Hub ID, Google uses "google", Microsoft 365 uses selector1/selector2, Mailchimp k1–k3, Brevo "mail".
Uses public DNS-over-HTTPS lookups (Cloudflare). No email is sent.
Result
- SPFnot checked
- DMARCnot checked
- DKIMnot checked
- Mail routing (MX)not checked
Enter a domain to begin.
DNS records are only part of deliverability: sending reputation, list hygiene and content matter too. This check tells you whether the foundation is in place; the Health Check measures actual inbox placement.
What each record does
SPF
Lists which servers may send mail for your domain. Missing or broken SPF is the most common reason B2B email lands in spam after a platform change.
DKIM
A cryptographic signature proving the email wasn't altered. Gmail and Yahoo now require it for bulk senders.
DMARC
Tells inboxes what to do when SPF or DKIM fail, and sends you reports. Required by Gmail and Yahoo since 2024; "p=none" is the safe starting policy.
MX
Where replies are delivered. No MX means replies to your campaigns bounce, and some filters treat the domain as suspicious.