Open Terminal

Email Health Check

Available

Run the core email checks for a domain in one go — MX, SPF, DKIM, DMARC, MTA-STS, TLS-RPT and blacklists — with plain-language findings.

Email Health Check

Domain

DKIM selector to check (optional; selectors cannot be discovered from DNS)

SMTP port to test on the mail server (587 submission, 25 delivery, 465 implicit TLS)

Open in terminal
Try:

How it works

Combines the individual lookups into one report. Each finding links to the dedicated tool so you can see the underlying records.

Safeguards & responsible use

  • Only public domain names are accepted; internal names (.local, .internal, …) are rejected.
  • Queries go to public resolvers, never to internal DNS.
  • Per-client rate limiting and query timeouts.
  • Connects only to public IP addresses — re-checked after DNS resolution — on SMTP ports 25, 465 and 587.
  • Strict connect and per-command timeouts, one connection per test and limited concurrency per client.
  • Read-only conversation (banner, EHLO, STARTTLS, QUIT): no message is sent and relaying is never attempted.

Frequently asked questions

Is there an overall score?

Findings are listed as pass, warning or fail with the evidence behind each. Any summary is derived only from those real checks — never estimated.

Does it check DKIM automatically?

DKIM keys live under selectors that cannot be listed from DNS. Common selectors are tried, and you can supply your own.