Free tool
Domain email checker
Enter a domain to look up its MX, SPF, DKIM and DMARC records live, with a pass, warning or fail for each and how to fix it.
Looked up live
- Records
- 4 MX, SPF, DKIM, DMARC
- DKIM selectors
- 25 common ones tried
Lookups go from your browser to Cloudflare's public DNS. Nothing is stored.
Enter the domain you send cold email from. Lookups run from your browser and nothing is stored.
How it works
Four records, checked in seconds
Check every domain you send cold email from, and check again after a DNS change.
- 01
Live DNS lookups
Your browser asks Cloudflare's public DNS over HTTPS for the domain's MX and TXT records, its _dmarc record and DKIM keys on common selectors.
- 02
Pass, warning or fail
MX must exist. SPF must be one record, end in ~all or -all and stay within 10 lookups (includes are followed). DMARC must exist; p=none or no reports is a warning. DKIM passes when a key is found.
- 03
The fix for each
Anything missing or weak comes with the fix, and the SPF and DMARC generators build the records for you.
FAQ
Questions, answered
Short answers about the domain email checker.
Why does DKIM show a warning when I have it set up?
DKIM keys live under a selector name, and DNS cannot list them. The checker tries 25 common selectors such as google, selector1 and selector2. If your provider uses its own name, it will not be found here, which does not mean it is missing.
I just changed my DNS. Why do I see the old records?
DNS answers are cached for the time to live (TTL) set on each record, often from a few minutes to a few hours. Check again later.
Which records does cold email need?
MX so replies arrive, one SPF record listing your senders, DKIM signing at your mailbox provider and a DMARC record. Gmail and Yahoo expect SPF, DKIM and DMARC from bulk senders.
Is the domain I enter stored?
No. The lookups go from your browser straight to Cloudflare's public DNS resolver. ZicReach does not see or keep the domain.