Outbound
Free tool

Email deliverability check: SPF, DKIM and DMARC

Enter your domain. We check the public DNS records that decide whether your email reaches the inbox or the spam folder, and tell you what to fix.

We only read public DNS records and store nothing.

Diese Seite auf Deutsch lesen

Deliverability included

Rather not set this up yourself?

We never send cold email from your main domain. Dedicated sending domains, SPF, DKIM, DMARC, warm-up and ongoing monitoring are part of every package, from 3,300 euros a month, all-inclusive.

What the check covers

The six records behind your deliverability

MX

Shows which server accepts email for your domain. Without it, no replies arrive and receivers treat the domain as suspicious.

SPF

A TXT record listing every server allowed to send in your name. There may be only one, and it may trigger at most ten DNS lookups.

DKIM

A digital signature in every email. The public key sits in DNS under a selector. Without DKIM your email counts as unsigned.

DMARC

Tells receivers what to do with email that fails SPF or DKIM and sends you reports. Gmail, Yahoo and Microsoft require it for bulk senders.

MTA-STS

Enforces encrypted delivery to your domain. A security topic, not decisive for the deliverability of your outgoing email.

BIMI

Shows your logo next to your email in supporting inboxes. Requires an enforced DMARC policy.

Email deliverability check: FAQ

How do I check SPF, DKIM and DMARC for my domain?

Enter your domain in the check above. It reads the public DNS records and shows for SPF, DKIM, DMARC, MX, MTA-STS and BIMI whether they exist and are correct, with a concrete fix for each. It takes a few seconds and is free.

Why does my email land in spam even though SPF, DKIM and DMARC pass?

Authentication is only the entry ticket. After that, reputation and behaviour decide: new domains without warm-up, too many emails per day, high bounce or complaint rates, and links or wording that look like bulk mail. Our cold email deliverability guide walks through the causes in order.

Should I send cold email from my main domain?

No. Cold email belongs on dedicated sending domains with their own mailboxes, warmed up first. That protects the reputation of the main domain your normal business email runs on. SPF, DKIM and DMARC have to be set correctly on those sending domains too.

Does the check store my domain?

No. The check only queries public DNS records through Cloudflare's DNS service and stores neither the domain nor the result. No email is sent and no mailbox is touched.

Is my domain ready for cold outreach if this check passes?

Technically it is a good start, but not the whole picture. Inbox placement also depends on warm-up, sending volume, list quality and the copy itself, and in Germany advertising email without prior consent is an unreasonable nuisance under the UWG even in B2B. This is not legal advice.