Free tool
Is your business email landing in spam?
Enter your domain or email address. We read the three DNS records Gmail and Outlook use to decide whether to trust your mail, and tell you what is missing.
The three records that decide it
All three are free to set up, and a missing or broken one is the usual reason genuine mail lands in spam.
SPF
A list of the servers allowed to send mail as your domain. There can only be one, and it breaks silently past ten DNS lookups, which is easy to hit as tools get added.
DKIM
A signature on every message that proves it was not altered on the way. Receivers trust signed mail more, and your mail provider publishes the key for you.
DMARC
Your instruction to receivers about mail that fails SPF and DKIM: deliver it, quarantine it or reject it. Without it, anyone can send mail that claims to be you.
Questions
The usual culprits are a missing or broken SPF record, no DKIM signature and no DMARC policy. Gmail and Outlook use all three to decide whether mail really comes from you. Content and sending volume matter too, but the records come first.
An SPF record may trigger at most ten DNS lookups while it is checked. Each include, a, mx, ptr, exists and redirect costs one, including the ones inside other records it includes. Past ten, the record fails completely, which looks the same as having no SPF.
DKIM keys sit under a selector name that only your mail provider knows. We check the common ones used by Google, Zoho, Microsoft, Hostinger and popular sending tools. A custom selector cannot be seen from outside.
It is the right first step, because it lets you collect reports without blocking anything. It does not protect you, though: mail that fails the checks is still delivered. Move to quarantine or reject once the reports show your own mail passing.
Guides
More free tools
Website Security Grade
An A+ to F grade for the security headers that protect your visitors, with what each gap means.
Run the checkDNS Checker
A, MX, TXT, NS and more, compared across four public resolvers, with plain-English warnings.
Run the checkWhois Lookup
Registrar, domain age, expiry, status codes, name servers, DNS records and where a domain is hosted.
Run the checkCustomers not getting your emails?
Send us the domain. We fix the records, test delivery to Gmail and Outlook, and tell you what changed.
No pitch deck, no obligation. Bring your URL and we will look at it together.