// domain scanner
Is your domain ready to send email?
Enter a domain: we check SPF, DKIM, DMARC, mail servers, blacklists, BIMI and encryption in a few seconds, and tell you what to fix in plain English.
How to use it
- Domain name: the part after the @ in your email address. For john@yourcompany.com, type yourcompany.com.
- DKIM selector: leave it empty, we try the common ones. Fill it only if DKIM is shown as missing although you set it up: it is the s= value in the DKIM-Signature header of an email you sent.
- The scan only reads public DNS records: nothing is changed on your domain, and it takes a few seconds.
Frequently asked questions
What does the domain scanner check?
Everything receivers look at before trusting an email from your domain: SPF (which servers may send for you), DKIM (the signature of your emails), DMARC (what to do with fakes), your mail servers (MX), domain blacklists, and the optional BIMI, MTA-STS and TLS-RPT records.
How is the score calculated?
SPF, DKIM and DMARC count the most, then blacklists and mail servers. BIMI, MTA-STS and TLS-RPT are optional bonuses: a domain without them can still score well.
Why is my DKIM key not found?
DNS cannot list the DKIM keys of a domain, so we try the most common selectors. If yours has a custom name, enter it in the selector field: it is the "s=" value of the DKIM-Signature header in an email you sent.
What is the difference with the email test?
The scanner checks the setup of a domain. The email test on the home page checks a real email: the server that sent it, its signature, its content and its spam score. Use both.