DNS checker
Members onlyInspect your domain's email and security settings in plain English: SPF, DKIM, DMARC, MX, MTA-STS, blocklists and when the domain expires. If something is missing, we give you the exact record to copy and paste where you manage your domain.
Only the domain name is checked. Nothing about your email is read or kept, and reports are deleted after 7 days.
Example report
brightwell.co.uk
8/9
Nearly thereOne thing to fix: DMARC is only watching, not protecting.✓SPF-all
✓DKIMgoogle._domainkey
!DMARCp=none
✓MXGoogle Workspace
✓MTA-STSenforce
✓Blocklistsclean on 10
✓Domain expiry14 Mar 2028
What it checks
Who can send as you
SPF, DKIM and DMARC, read the way a receiving mail server reads them, with the fix spelt out.
Where your mail goes
MX records, the provider behind them and whether MTA-STS keeps mail encrypted on the way in.
Trouble spots
Ten blocklists, the domain's expiry date and the registrar, so nothing lapses quietly.
Trace missing or delayed emailsWondering why an email vanished or ended up in junk? Use the email header reader to trace its journey across the web step by step. Free and open to everyone, running privately inside your browser.Read email headers