Email DNSchecker.
See a domain's MX, SPF, DKIM, DMARC and A records side by side, to check a new sending domain or find what changed on an old one.
How it works
- Enter a domainYours, or one you're about to email
- See every recordMX, SPF, DKIM, DMARC and A
- Spot what's missingMissing and weak records are marked
Free, no sign-up. Checked live from our server. Nothing is stored.
The tool
Check a sending domain
MX, SPF, DKIM, DMARC and A records in one look.
What each record tells you.
What the result means, and how to fix what it finds.
MX: where replies go
MX records name the servers that receive email for the domain, tried in order of priority (lowest first). A domain with no MX can't receive replies, which is a problem for cold email: people reply, and bounced replies look bad. The provider name tells you who hosts the mailboxes, for example Google Workspace or Microsoft 365.
SPF and DMARC
SPF lists who may send as the domain; DMARC says what to do when an email fails and where to send reports. Both are TXT records. We count SPF's DNS lookups, because more than 10 make it fail, and show the DMARC policy: none (monitor), quarantine or reject.
DKIM
DKIM keys live under a selector name, so a domain can have several. We try the selector names the common providers use and show the keys we find with their length. Not finding one usually means DKIM isn't on, or the provider uses another selector name; the DKIM Checker lets you try yours.
A records
The A record is the address the domain's website points to. It doesn't affect email directly, but the blocklists that check addresses look at it. Cold email domains often redirect to your main website, which is fine. What matters for sending is the mail records above.
A quick audit routine
When a new sending domain is ready, check four things in order. First, MX: replies have somewhere to go. Second, SPF: one record, your mailbox provider included, fewer than 10 lookups. Third, DKIM: a key published and signing turned on at the provider. Fourth, DMARC: at least p=none with a report address. Then check the domain on blocklists and give its mailboxes time to warm up. Doing it in this order catches the problems that block everything else first. Save a copy of the results, so when something changes later you can compare and see exactly which record moved.
In mailzy
Records checked for you, every night.
mailzy checks SPF, DKIM, DMARC and MX for every domain you send from and tells you when something breaks.
Questions before you start.
Ask us on the chat if yours isn't here. A real person answers.
Why do my records not show yet?
DNS changes take time to spread, usually under an hour and sometimes up to a day. Check again later.
Can I check someone else's domain?
Yes. DNS records are public. It's a quick way to see who hosts a prospect's email.
What does 'Couldn't check' mean?
The DNS lookup didn't answer in time. It says nothing about the domain; try again in a minute.
More free tools.
Domain Health Checker
One score for a sending domain: SPF, DKIM, DMARC, MX, blocklists and Gmail's and Yahoo's sender rules.
Open the toolSPF Record Generator
Build one valid SPF record from the services you send with, with the 10-lookup limit counted.
Open the toolDKIM Checker
Check that a DKIM key is published, that it parses, and that it's long enough.
Open the toolEverything for cold email, in one place.
Start free for 14 days. No card needed.