Free email domain check
This free check looks up your domain's SPF, DKIM, DMARC and MX records.
Type your domain and see in seconds whether mailbox providers have what they look for before they trust the email you send from it. The lookups run in your browser, and Prymatica does not store the domain you type.
Four checks run in a few seconds
- MXWhere replies to your domain land
- SPFWhich servers may send for you
- DKIMA signature proving the mail is yours
- DMARCWhat to do when a check fails
The check reads four things in your domain's DNS.
MX records tell the world where to deliver mail for your domain.
Without them, replies to your outreach have nowhere to land, and receiving servers see a sender that cannot take email. The check lists each mail server and its priority number.
An SPF record lists the servers that may send email for your domain.
The check finds your SPF record and flags a missing one, more than one, and a record ending in +all, which lets any server send as you.
A DKIM key lets receivers confirm a message was signed by your domain.
The key sits at a name that includes a selector chosen by your email provider, so the check tries 9 common ones. A result of not found can mean your provider uses a custom selector.
A DMARC policy tells receivers what to do when SPF or DKIM fails.
The check reads the policy and shows whether it is none, quarantine or reject. A policy of none only monitors, so it counts as monitoring only and not protected.
A receiving server reads three records before it places a message.
When a message arrives, the receiving server looks up your domain's SPF, DKIM and DMARC records. SPF says which servers may send for you, DKIM proves the message was signed by you and not changed, and DMARC says what to do when either fails. Missing records do not always get a message refused, but they give the server an easy reason to send it to the spam folder.
What a receiving server does with one message
1. A message arrives
It says it is from you at your domain.
2. The server reads three records in your DNS
- SPFDid this message come from a server the domain allowed?
- DKIMIs the signature genuine, and is the message unchanged?
- DMARCWhat should happen if either answer is no?
3. The message goes to
- InboxBoth checks pass
- Spam folderChecks missing or failing
- RefusedPolicy says reject
MX records work the other way: they tell senders where to deliver replies to you.
Mailbox providers started requiring SPF, DKIM and DMARC from bulk senders in 2024.
In October 2023 Google and Yahoo announced new rules for anyone who sends email in volume, and the rules took effect in February 2024. Gmail treats a sender as bulk above 5,000 messages a day to Gmail addresses. Bulk senders must publish SPF, DKIM and a DMARC policy, which may be p=none, and every other sender needs at least SPF or DKIM. Google says unauthenticated mail may be marked as spam or rejected.
The reason is forgery. Without these checks anyone can send email that claims to come from your domain, and phishing depends on exactly that. Mailbox providers asked senders to prove who they are so they could filter the fakes harder. Microsoft followed in May 2025 with matching rules for Outlook.com.
Cold email feels this more than most mail. It goes to people who did not ask for it, so receivers watch the sender closely, and a domain with missing records gives them a reason to filter it. That is why every sending domain Prymatica sets up has all of these records in place before the first message.
How the authentication rules for senders arrived
- Oct 2023Google and Yahoo announce new rules for bulk senders
- Feb 2024The rules take effect: SPF, DKIM and a DMARC policy
- May 2025Outlook.com adds matching rules for high-volume senders
These glossary terms explain the results.
These Prymatica pages go deeper on email deliverability.
Questions
People ask these questions about the email domain check.
Is the email domain check free?
Yes. There is no signup and no limit, and the lookups run in your browser.
Does Prymatica store the domain I type?
No. Your browser asks public DNS servers directly, and Prymatica does not store the domain you type or the records it finds. The page only counts that a check was run, with the number of passes, warnings and fails.
What does a DMARC policy of none mean?
It means monitoring only. Receivers still deliver mail that fails SPF and DKIM, so the policy does not protect your domain, although it meets the minimum that Gmail and Yahoo ask of bulk senders. Move to quarantine and then reject once the reports show that only your own servers send as you.
Why does the check say DKIM was not found when my email provider set it up?
A DKIM key lives at a name that includes a selector, and only your email provider knows which one it chose. The check tries 9 common selectors, so a custom one is invisible to it. Look for the DKIM or domain signing setting in your email provider's admin area to confirm.
Can this check tell me whether my emails land in spam?
No. It reads DNS records only. Inbox placement also depends on sender reputation, message content and list quality, so a clean result means your setup is right, not that every message reaches the inbox.
How do I fix a missing or broken record?
Add or edit the record in the DNS settings of the service that manages your domain, using the values your email provider gives you. A change can take from a few minutes to a few hours to show up. If you would rather not edit DNS yourself, Prymatica sets up sending domains with all four records done right.
When should I run the check again?
After any change to your DNS or your email provider, and before you start sending from a new domain.
Want your sending domains and inboxes set up right?
We buy the domains, create and warm the inboxes, write the SPF, DKIM and DMARC records and run the outreach. Book a free intro call and we'll show you how.
No contracts. Start free. Cancel anytime.