Your email lands in spam. The fix is one DNS record.
A checkup for your domain's email health. We examine SPF, DMARC, DKIM, MX and blacklists — plus SSL and domain expiry — then write the prescription: the exact record to paste.
_dmarc · Record type: TXT · TTL: 3600v=DMARC1; p=quarantine; rua=mailto:[email protected]; adkim=s; aspf=sEvery fix record is computed from your live DNS — same input, same prescription, every time.
Email DNS plus domain and SSL expiry — the whole picture in one scan.
Paste a domain, get the diagnosis. No account, no card, no email.
- SPFThe list of servers allowed to send email as your domain.Pass
- DMARCYour instruction to Gmail & co: what to do with mail that fails the check.Fail
- DKIM (common selectors)A tamper-proof signature stamped on every message you send.Warning
- MXThe address where your incoming mail is delivered.Pass
- DNSDNSSEC signing and other DNS hardening — protection against attackers tampering with your DNS answers.Couldn't check — temporary
- Domain & SSL expiryCertificates and registrations that quietly run out — and break everything.Warning
- Blacklist (RBL)Whether spam filters have your domain on a block list.Pass
Sample verdicts from different domains — the full range you might see. We check common DKIM selectors and say so — never silence, never fake certainty.
AI explains the diagnosis.
It never writes the prescription.
Every finding comes with a plain-English explanation, so you understand what's wrong without learning DNS first. It's always labelled and kept apart — your fix records come only from the deterministic engine.
Your DMARC policy is p=none — you're watching, but spoofed mail still reaches inboxes. Quarantine tells receivers to junk anything that fails the check.
_dmarc · Record type: TXT · TTL: 3600v=DMARC1; p=quarantine; rua=mailto:[email protected]Dashed border = AI prose. Teal panel = the deterministic engine. The two are never mixed.
The scan is free. Monitor keeps you healthy.
Records drift silently — auth failures don't announce themselves, and the road to p=reject takes weeks of evidence.
The deterministic engine writes the exact record — never AI guesses. Daily re-scans, report-driven readiness.
- +Alerts: record changes, blacklist listings, domain & SSL expiry
- +DMARC report (RUA) dashboard — who sends as you, aligned or not
- +Enforcement readiness: the next policy record when it's safe
- +10 domains · unlimited volume · 12-month retention