Studios XeniaWhat it checks
- MX: whether the domain receives email and on which servers.
- SPF: whether there's a single record, how it ends (
-all,~all) and how many lookups it makes. - DMARC: whether it exists, its policy and whether it sends reports.
- DKIM: whether we find a signature with the most common selectors from Google Workspace, Microsoft 365, Hostinger and other providers.
How to read the result
A healthy domain has a single SPF ending in -all or ~all, a published DKIM and a DMARC record with reports. If one is missing, your email goes out without one of its credentials and is more likely to land in spam. Google, for example, asks everyone sending to Gmail for SPF or DKIM.
If we don't find DKIM, it doesn't mean it isn't there: it may be published under another selector. Your email provider can tell you which one it uses.
What to do if something fails
The records are fixed in your domain's DNS, wherever you manage it. If you'd rather have us set it up properly, send us the result.
Frequently asked questions
Do you store the domain I check?
No. The lookup goes from your browser to Google's public DNS and the result is shown only on your screen.
Why doesn't my DKIM show up?
Because each provider publishes it under a different name, called a selector. We try the most common ones; if yours uses another, ask your email provider.
Which DMARC policy should I use?
Start with p=none and a mailbox for reports, review them for a few weeks and then move to quarantine or reject.