Will Your Cold Email Land in the Inbox?
If your SPF, DKIM, and DMARC records aren't set up right, your outreach goes straight to spam — and your domain can be spoofed. Check any domain's email authentication in 30 seconds.
Read-only public DNS lookups — nothing is sent and no mailbox is accessed.
What we check
- SPF — present, exactly one record, valid syntax, and a strict policy (-all / ~all vs a wide-open ?all)
- DKIM — signing keys published under the common selectors mail platforms use
- DMARC — record present, an enforced policy (quarantine/reject, not just p=none), and aggregate reporting (rua)
- MX — real mail routing, plus a best-effort blocklist (DNSBL) check on the sending IP
Every finding comes with the exact DNS record to publish.
Not just "DMARC is p=none" — the precise TXT record to add, in what order to tighten it, and how to avoid locking out your own mail. Fix it yourself or hand it to IT.